62-43
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 62 Configuring Network Security with ACLs
Configuring Object Group ACLs
Configuring an IPv4 OG ACL
When creating an object group ACL, configure an ACL that references one or more object groups. As
with conventional ACLs, you can associate the same access policy with one or more interfaces.
You can define multiple ACEs that reference object groups within the same object group ACL. You can
also reuse a specific object group in multiple ACEs. To create an object group ACL, perform the
following task:
Step 7
group-object
nested-object-group-name
Example:
Switch(config-service-group)#
group-object
my-nested-object-group
(Optional) Specifies a nested (child) object group to be
included in the current (parent) object group.
The child object group type must match that of the parent
(for example, if you are creating a network object group,
you must specify another network object group as the
child).
You can use duplicate objects in an object group only by
nesting group objects. For example, if object 1 is in both
group A and group B, you can define a group C that
includes both A and B. However, you cannot include a
group object that causes the group hierarchy to become
circular (for example, you cannot include group A in group
B and then also include group B in group A).
While you can have an unlimited number of nested levels
we recommend a maximum of two levels.
Step 8
Repeat the steps until you have specified objects on
which you want to base your object group.
—
Step 9
end
Example:
Switch(config-network-group)#
end
Exits network object-group configuration mode and returns
to privileged EXEC mode.
Command or Action
Purpose
Command or Action
Purpose
Step 1
configure terminal
Example:
Switch#
configure terminal
Enters global configuration mode.
Step 2
ip access-list extended
access-list-name
Example:
Switch(config)#
ip access-list extended
my-ogacl-policy
Defines an extended IP access list using a name and enters
extended access-list configuration mode.
Summary of Contents for Catalyst 4500 Series
Page 2: ......
Page 4: ......
Page 2086: ...Index IN 46 Software Configuration Guide Release IOS XE 3 9 0E and IOS 15 2 5 E ...
