topic Re: Remove ALL network-objects from object-group with single command in Network Security

Remove ALL network-objects from object-group with single command

jasonrob1 — Fri, 29 Mar 2024 19:33:31 GMT

I'm wondering if there is a way to remove ALL network-objects from an network object-group with one command. I figured the easiest way to do this is to negate the object-group and re-create it. If the object-group is used on a ACL it is not possible.

Short of listing all network-objects and negating them, is there another way to accomplish what I'm trying to do?

Re: Remove ALL network-objects from object-group with single command

balaji.bandi — Fri, 29 Mar 2024 19:41:34 GMT

As you mentioned if the object or object group associated with ACL.

May be get the ACL out of the box validate using any programming language and get final copy and apply back.

Note : depends on how may ACL you have, if less than 50 i do manually, if more 1K lines i go programming approach.

Re: Remove ALL network-objects from object-group with single command

MHM Cisco World — Fri, 29 Mar 2024 19:44:06 GMT

To remove all object groups from the configuration, use the clear config object-group configuration command.

Note note it remove all object group

MHM

Re: Remove ALL network-objects from object-group with single command

jasonrob1 — Sat, 30 Mar 2024 18:14:42 GMT

The programming route is likely what I have to take, just wanted to see if there was a better way. thanks for your reply.

Re: Remove ALL network-objects from object-group with single command

jasonrob1 — Sat, 30 Mar 2024 18:18:48 GMT

Perhaps I wasn't as clear as I could have been. I'm actually trying to clear all network-objects embedded in an object-group. Removing ALL object-groups is not something I'm wanting to accomplish.

Re: Remove ALL network-objects from object-group with single command

MHM Cisco World — Mon, 01 Apr 2024 17:59:10 GMT

I Will check one point and update you mac tomorrow

MHM