object IP's in ASA

[sasanka1912]

Hi ,

We have multiple objects part of an Object-group in Cisco ASA, and wonder if there is any command that we can run to get all the IP addresses in that object-group  instead of running sh run object id object-name for each object separately?

please advise 

[MHM Cisco World]

show running-config | include object

[Rob Ingram]

@sasanka1912 show run object-group ?

Example:-

ASA# show run object-group
object-group network DNS-SERVERS
 network-object host 208.67.220.220
 network-object host 208.67.222.222
object-group network ALL-VLANS
 network-object object VLAN4
 network-object object VLAN5

[sasanka1912]

@Rob Ingram we have multiple object groups, and I was looking for a command to find all the ip addresses belong to the objects in that object group .

for ex- lets say my object group name is ISP-SERVERS 

And i have the below objects part of the that ISP-SERVER group.

Object-xserver1  ISP1

Object-xserver ISP2 etc

and if i do sh run object id object-xserver1

it will give the ip details such as lets say 200.10.10.0/24

instead of running sh run object id xxx , is there any command to get all the ip's associated with that objects , in that particular object group..

Thanks

[MHM Cisco World]

Did you ever check my command?

MHM

[Rob Ingram]

@sasanka1912 not natively in ASA without some sorting and filtering. Perhaps create a python script to do this for you?

[sasanka1912]

@MHM Cisco World  , Thanks for your reply and i did run  that command, and it will only give the object name instead of the associated ip details.

@Rob Ingram  sh run object-group id xxx will give essentially the same result .. probably i will try and see if i run a script instead.

Thanks both for your replies..

[MHM Cisco World]

Dont fast  give up

Try this 

running-config | section object-group |  include network-object

Try above

MHM

[balaji.bandi]

I have used Python script before - check if that help you :

https://www.balajibandi.com/?p=2663

[sasanka1912]

@balaji.bandi Thanks ..Will test this and let you know ..I guess there is no native command in ASA apart from using a python script as you mentioned above..Thanks

[balaji.bandi · Accepted solution]

Sure - I have not noticed until i have ASA 9.20 code (later moved to FTD now)