Cisco 4700M Configuration Manual page 47

Chapter 1 Configuring Security Access Control Lists
Configuring a Network IP Address for a Network Object Group
Configuring a Host IP Address
OL-16202-01
For example, to add a description to a network object group, enter:
host1/Admin(config-objgrp-netw)# description intranet network object
group
To remove a description from a network object group, enter:
host1/Admin(config-objgrp-netw)# no description intranet network
object group
To associate a network IP address with a network object group, use the ip_address
argument in object-group network configuration mode. The syntax of this
command is as follows:
ip_address netmask
The arguments are as follows:
• ip_address —IP address assigned to the network object group. Enter an IP
address in dotted-decimal notation (for example, 192.168.12.15).
netmask—Network mask applied to the IP address. Enter a network mask in
•
dotted decimal notation (for example, 255.255.255.0).
For example, to add the IP address 192.168.12.15 and network mask
255.255.255.0 to a network object group, enter:
host1/Admin(config-objgrp-netw)# 192.168.12.15 255.255.255.0
Enter additional object-group IP addresses as required.
To remove an IP address from the network object group, enter:
host1/Admin(config-objgrp-netw)# no 192.168.12.15 255.255.255.0
To associate a host IP address with a network object group, use the host command
in object-group network configuration mode. The syntax of this command is as
follows:
host ip_address
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
Simplifying Access Control Lists with Object Groups
1-23