topic grep a section in Cisco ASA in Network Security

grep a section in Cisco ASA

networkinggeek — Fri, 21 Feb 2020 17:08:37 GMT

Say I have a object host IP, and I want to see under which object group it belongs to.

if I do show run | in IP (I only see the lines where the IP exist) not its main section and subsections.

What grep command will help me get its complete section in Cisco ASA?

Thanks

Re: grep a section in Cisco ASA

hslai — Fri, 17 May 2019 22:11:01 GMT

I moved your post to Firewalls, as it's specific to ASA.

I usually use "show run object group". Also see Finding what object groups an ip addres... - Cisco Community

Re: grep a section in Cisco ASA

GRANT3779 — Sat, 18 May 2019 08:45:13 GMT

sh object-group network | inc object-group|x.x.x.x

Where x.x.x.x is the ip of host you are interested in should help. It will list groups with the IP/Host you are looking for.

Re: grep a section in Cisco ASA

networkinggeek — Tue, 21 May 2019 22:07:24 GMT

so it partially helps, appreciate that. But it still show lines with text containing word object-group not relevant to my search. all I need is when I search the IP it lists down the IP and which group it is sitting under.

Re: grep a section in Cisco ASA

networkinggeek — Tue, 21 May 2019 22:12:40 GMT

I also found this command for more refined result from other post.
#show running-config object network in-line | i x.x.x.x