Cisco Nexus 7000 Series, Command Reference Manual

Page: 546 / 1018

object-group ip port
To define an IP port object group or to enter object-group configuration mode for a specific IP port object
group, use the
object-group ip port command. To remove an IP port object group, use the no form of this
command.
object-group ip port name
no object-group ip port name
Syntax Description
Name of the IP port object group, which can be up to
64 alphanumeric, case-sensitive characters. name
Command Default
None
Command Modes
Global configuration
Command History
Modification Release
This command was introduced. 4.0(1)
Usage Guidelines
You can use IP port object groups in permit and deny commands for IPv4 and IPv6 access control lists
(ACLs).
IP port object groups are not directional. Whether group members match a source or destination port or whether
an object group applies to inbound or outbound traffic depends upon how you use the object group in an ACL.
This command does not require a license.
Examples
This example shows how to configure an IP port object group named port-group-05 with a group member
that matches traffic sent to or from port 443:
switch# configure terminal
switch(config)# object-group ip port port-group-05
switch(config-port-ogroup)# eq 443
switch(config-port-ogroup)# show object-group
port-group-05
10 eq 443
switch(config-port-ogroup)#
Cisco Nexus 7000 Series Security Command Reference
520
O Commands
object-group ip port