network objects for IOS

[Benjamin Waldon]

Hello,

I have a question: Are there such a thing as network objects for IOS?

I work with Cisco ASAs, Routers, and switches on a regular basis. I have found the network objects (and associated groups) very helpful in the ASA. They allow me to define ports and ip addresses (ranges, etc) as object and reference those objects in access lists and nat commands.

We use Cisco 3560s with the ip routing enabled. We use access lists as part of this. We find it fairly cumbersome to go through and list out all the IP addresses and ports. It would be very helpful if we could list out the objects, like we do on the ASA.

Thanks,

Ben

[sean_evershed]

Hi,

Network Object groups were introduced in version 12.4(20)T. See below:

http://www.cisco.com/en/US/docs/ios/sec_data_plane/configuration/guide/sec_object_group_acl.html

I don't think this feature however is available on switches. To check use the feature navigator at

http://tools.cisco.com/ITDIT/CFN/

Please remember to rate all posts that are helpful.

Cheers

Sean