Configuring Object Groups
show tech-support aclmgr
show tech-support aclqos
Configuring Object Groups
You can use object groups to specify source and destination addresses and protocol ports in IPv4 ACL and
IPv6 ACL rules.
Session Manager Support for Object Groups
Session Manager supports the configuration of object groups. This feature allows you to create a configuration
session and verify your object group configuration changes prior to committing them to the running
configuration. For more information about Session Manager, see the Cisco Nexus 9000 Series NX-OS System
Management Configuration Guide.
Creating and Changing an IPv4 Address Object Group
You can create and change an IPv4 address group object.
SUMMARY STEPS
1. configure terminal
2. object-group ip address name
3. Enter one of the following commands:
4. Enter one of the following commands:
5. (Optional) show object-group name
6. (Optional) copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
switch# configure terminal
switch(config)#
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
274
• [sequence-number] host IPv4-address
• [sequence-number] IPv4-address/prefix-len
• [sequence-number] IPv4-address network-wildcard
• no [sequence-number]
• no host IPv4-address
• no IPv4-address/prefix-len
• no IPv4-address network-wildcard
Purpose
Enters global configuration mode.
Configuring IP ACLs