06 对象组.pptVIP

Using Object Groups in ACLs Grouping Objects Grouping Objects of Similar Types Protocols TCP UDP Networks and hosts Subnet /24 1 1 Services HTTP HTTPS FTP ICMP Echo Echo-reply INSIDE_PROTOCOLS INSIDE_HOSTS DMZ_SERVICES PING Configuring and Using Object Groups Complete the following steps to create object groups and use them in your configuration: Step 1: Use the object-group command to enter the appropriate subcommand mode for the type of group you want to configure. Task 2: In subcommand mode, define the members of the object group. Task 3: (Optional) Use the description subcommand to describe the object group. Task 4: Use the exit or quit command to return to configuration mode. Task 5: (Optional) Use the show object-group command to verify that the object group has been configured successfully. Task 6: Apply the object group to the access-list command. Task 7: (Optional) Use the show access-list command to display the expanded ACL entries.? Configuring Network Object Groups Configuring Service Object Groups Adding Object Groups to an ACL Configuring ICMP-Type Object Groups Nested Object Groups Configuring Nested Object Groups Complete the following steps to configure nested object groups: Step 1: Create an object group, such as Inside_Eng that you want to nest within another object group. Step 2: Add the appropriate type of objects to the object group, such as /24. Step 3: Assign an identity, such as Inside_Networks to the object group within which you want to nest other object groups. Step 4: Add the first object group to the second  object group. Step 5: Add any other objects to the group that are required, such as Inside_Mktg. Nested Object Group Example: Object Group Network group-object Command Nested Object Group Example: Object Group Services Apply Nested Object Group to ACL Allow all inside hosts outbound HTTP HTTPS FTP Multiple Object Groups in ACLs Displaying Configured Object Groups Displays object groups in the co