Cisco PIX 525 Dokumentacja Pobierz pdf (Strona 142)

3-30

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Chapter 3 Controlling Network Access and Use

Simplifying Access Control with Object Grouping

Step 4 Add the first object group to the group that will contain that object:

pix(config-protocol)# group-object A

Step 5 Add any other objects to the group that are required:

pix(config-protocol)# protocol-object 4

The resulting configuration of Group_B in this example is equivalent to the following:

pix(config-protocol)# protocol-object 1

pix(config-protocol)# protocol-object 2

pix(config-protocol)# protocol-object 3

pix(config-protocol)# protocol-object 4

Displaying Configured Object Groups

To display a list of the currently configured object groups, use the show object-group command:

show object-group [ protocol | network | service | icmp-type ] | [id grp_id]

Use the listed parameters to restrict the display to specific object types or to identify a specific object

group by name. The system displays a list of the currently configured object groups identified by the

command. Replace

grp_id with the name of a specific object group. If you enter the command without

any parameters, the system displays all configured object groups.

Example 3-7 shows sample output from the show object-group command.

Example 3-7 Show object-group Command Output

pix(config)# show object-group

object-group network ftp_servers

description: This is a group of FTP servers

network-object host 209.165.201.3

network-object host 209.165.201.4

object-group network TrustedHosts

network-object host 209.165.201.1

network-object 192.168.1.0 255.255.255.0

group-object ftp_servers

Removing Object Groups

To remove the object group configuration for all the groups of a specific type, use the clear object-group

command:

pix(config)# clear object-group [protocol | network | services | icmp-type]

If you enter the clear object-group command without any parameters, the system removes all

configured object groups.

1 2 ... 137 138 139 140 141 142 143 144 145 146 147 ... 465 466

Brak uwag

Cisco PIX 525 Dokumentacja Strona 142