topic Re: object IP's in ASA in Network Security

object IP's in ASA

Chaminda1912 — Sat, 30 Aug 2025 20:06:34 GMT

Hi ,

We have multiple objects part of an Object-group in Cisco ASA, and wonder if there is any command that we can run to get all the IP addresses in that object-group instead of running sh run object id object-name for each object separately?

please advise

Re: object IP's in ASA

MHM Cisco World — Sat, 30 Aug 2025 20:15:29 GMT

show running-config | include object

Re: object IP's in ASA

Rob Ingram — Sat, 30 Aug 2025 20:16:15 GMT

@Chaminda1912 show run object-group ?

Example:-

ASA# show run object-group
object-group network DNS-SERVERS
 network-object host 208.67.220.220
 network-object host 208.67.222.222
object-group network ALL-VLANS
 network-object object VLAN4
 network-object object VLAN5

Re: object IP's in ASA

Chaminda1912 — Sat, 30 Aug 2025 20:26:04 GMT

@Rob Ingram we have multiple object groups, and I was looking for a command to find all the ip addresses belong to the objects in that object group .

for ex- lets say my object group name is ISP-SERVERS

And i have the below objects part of the that ISP-SERVER group.

Object-xserver1 ISP1

Object-xserver ISP2 etc

and if i do sh run object id object-xserver1

it will give the ip details such as lets say 200.10.10.0/24

instead of running sh run object id xxx , is there any command to get all the ip's associated with that objects , in that particular object group..

Thanks

Re: object IP's in ASA

MHM Cisco World — Sat, 30 Aug 2025 20:29:52 GMT

Did you ever check my command?

MHM

Re: object IP's in ASA

Rob Ingram — Sat, 30 Aug 2025 20:34:31 GMT

@Chaminda1912 not natively in ASA without some sorting and filtering. Perhaps create a python script to do this for you?

Re: object IP's in ASA

Chaminda1912 — Sat, 30 Aug 2025 20:48:30 GMT

@MHM Cisco World , Thanks for your reply and i did run that command, and it will only give the object name instead of the associated ip details.

@Rob Ingram sh run object-group id xxx will give essentially the same result .. probably i will try and see if i run a script instead.

Thanks both for your replies..

Re: object IP's in ASA

MHM Cisco World — Sun, 31 Aug 2025 11:23:37 GMT

Dont fast give up

Try this

running-config | section object-group | include network-object

Try above

MHM

Re: object IP's in ASA

balaji.bandi — Sun, 31 Aug 2025 06:28:06 GMT

I have used Python script before - check if that help you :

https://www.balajibandi.com/?p=2663

Re: object IP's in ASA

Chaminda1912 — Sun, 31 Aug 2025 11:10:54 GMT

@balaji.bandi Thanks ..Will test this and let you know ..I guess there is no native command in ASA apart from using a python script as you mentioned above..Thanks

Re: object IP's in ASA

balaji.bandi — Sun, 31 Aug 2025 11:27:38 GMT

Sure - I have not noticed until i have ASA 9.20 code (later moved to FTD now)