topic Re: Object-groups 101 tips? in Network Security

Object-groups 101 tips?

azore2007 — Mon, 11 Mar 2019 13:37:28 GMT

Is it possible that in the CLI to find out in what object-group(s) that a specific IP is located?

I'm currently just dumping the configuration and using wordpad to search it through. It sucks but its the easiest way, for me atlest.

It might be easy with a small configuration but we have alot of object-groups with alot of IP's in each and everyone of them.

Thanks

Re: Object-groups 101 tips?

andrew.prince — Fri, 29 Aug 2008 07:12:20 GMT

I think the closest you are going to get is:-

show run object-group - shows all object group config

show run object-group | inc <> - just shows the config line, not the object group it's in

show run | inc <> - which will show all config with the IP address in it

HTH>

Re: Object-groups 101 tips?

azore2007 — Fri, 29 Aug 2008 07:28:10 GMT

Hi Andrew

Yea thats what I'm using today.

Just found this, instead of dumping the config,, just type in this in the browser

https://

Re: Object-groups 101 tips?

andrew.prince — Fri, 29 Aug 2008 07:30:27 GMT

That is another way of seeing the config - but I cannot see how this helps you?

Re: Object-groups 101 tips?

azore2007 — Fri, 29 Aug 2008 08:00:48 GMT

I skip the need to dump the config to a text file and use a wordprocessing program.

Just saves some time.

But no, in the big picture it doesnt help at all

Re: Object-groups 101 tips?

Farrukh Haroon — Fri, 29 Aug 2008 16:54:39 GMT

The best way would be:

"show run object-group | inc |network"

This way you would also see in which object-group that IP is in, but the downside is you will see the names of all other 'network' type object groups as well 🙂

Regards

Farrukh