Contents

Configuring object groups· 1

About object groups· 1

Configuring an IPv4 address object group· 1

Configuring an IPv6 address object group· 1

Configuring a port object group· 2

Display and maintenance commands for object groups· 2

Configuring object groups

About object groups

An object group is a group of objects that can be used by an ACL to identify packets. Object groups are divided into the following types:

·          IPv4 address object group—A group of IPv4 address objects used to match the IPv4 address in a packet or match the user from whom a packet comes.

·          IPv6 address object group—A group of IPv6 address objects used to match the IPv6 address in a packet or match the user from whom a packet comes.

·          Port object group—A group of port objects used to match the protocol port number in a packet.

Configuring an IPv4 address object group

1.        Enter system view.

system-view

2.        Configure an IPv4 address object group and enter its view.

object-group ip address object-group-name

The system has one default IPv4 address object group named any.

3.        (Optional.) Configure a description for the IPv4 address object group.

description text

By default, an object group does not have a description.

4.        Configure an IPv4 address object.

[ object-id ] network { host { address ip-address | name host-name } | subnet ip-address { mask-length | mask } | range ip-address1 ip-address2 }

Configuring an IPv6 address object group

1.        Enter system view.

system-view

2.        Configure an IPv6 address object group and enter its view.

object-group ipv6 address object-group-name

The system has one default IPv6 address object group named any.

3.        (Optional.) Configure a description for the IPv6 address object group.

description text

By default, an object group does not have a description.

4.        Configure an IPv6 address object.

[ object-id ] network { host { address ipv6-address | name host-name } | subnet ipv6-address prefix-length | range ipv6-address1 ipv6-address2 }

Configuring a port object group

1.        Enter system view.

system-view

2.        Configure a port object group and enter its view.

object-group port object-group-name

The system has one default port object group named any.

3.        (Optional.) Configure a description for the port object group.

description text

By default, an object group does not have a description.

4.        Configure a port object.

[ object-id ] port { { eq | lt | gt } port | range port1 port2 }

Display and maintenance commands for object groups

Execute display commands in any view.