topic Access-Lists in Network Security https://community.cisco.com/t5/network-security/access-lists/m-p/1618448#M558982 <P>Is it possible to configure a line in an access list to open a series of ports as opposed to adding a line for each port number?&nbsp; Could I be able to, in one line, allow for example ports "1-10"?</P> Mon, 11 Mar 2019 20:14:13 GMT charlieb_j 2019-03-11T20:14:13Z Access-Lists https://community.cisco.com/t5/network-security/access-lists/m-p/1618448#M558982 <P>Is it possible to configure a line in an access list to open a series of ports as opposed to adding a line for each port number?&nbsp; Could I be able to, in one line, allow for example ports "1-10"?</P> Mon, 11 Mar 2019 20:14:13 GMT https://community.cisco.com/t5/network-security/access-lists/m-p/1618448#M558982 charlieb_j 2019-03-11T20:14:13Z Re: Access-Lists https://community.cisco.com/t5/network-security/access-lists/m-p/1618449#M558983 <HTML><HEAD></HEAD><BODY><P>Hi Charlie,</P><P></P><P></P><P></P><P>&nbsp;&nbsp;&nbsp;&nbsp; You can configure a range of ports to be allowed on an access-list by using the Obect group feature.You need to define the range of ports in an Object-group :</P><P></P><P></P><P><STRONG>Eg:</STRONG><SPAN class="content"><PRE>(config)#<STRONG>object-group service <SPAN style="font-weight: normal; font-style: italic;">high_ports</SPAN> tcp</STRONG> (config-service)#<STRONG>port-object range 1024 65535</STRONG> (config-service)#<STRONG>exit</STRONG> </PRE></SPAN></P><P></P><P></P><P>Once you define the Obect group you can call this object group on the Accesslist:</P><P></P><P>access-list abc permit tcp any any object-group <STRONG style="font-style: italic; font-weight: normal; "><HIGH_PORTS></HIGH_PORTS></STRONG></P><P></P><P><STRONG>-Somanna M P</STRONG></P></BODY></HTML> Tue, 29 Mar 2011 14:09:26 GMT https://community.cisco.com/t5/network-security/access-lists/m-p/1618449#M558983 Somanna M.P 2011-03-29T14:09:26Z