Cisco 5510 - ASA SSL / IPsec VPN Edition User Manual

1-9
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Objects
Configuring Objects
Example
To create service groups that include DNS (TCP/UDP), LDAP (TCP), and RADIUS (UDP), enter the
following commands:
hostname (config)# object-group service services1 tcp-udp
hostname (config-service)# description DNS Group
hostname (config-service)# port-object eq domain
hostname (config)# object-group service services2 udp
hostname (config-service)# description RADIUS Group
hostname (config-service)# port-object eq radius
hostname (config-service)# port-object eq radius-acct
hostname (config)# object-group service services3 tcp
hostname (config-service)# description LDAP Group
hostname (config-service)# port-object eq ldap
Command Purpose
Step 1
object-group service grp_id {tcp | udp |
tcp-udp}
Example:
hostname(config)# object-group service
services1 tcp-udp
Adds a service group.
The object keyword adds an additional object to the service object
group.
The grp_id is a text string up to 64 characters in length and can be
any combination of letters, digits, and the following characters:
• underscore “_”
• dash “-”
• period “.”
Specifies the protocol for the services (ports) you want to add with
either the tcp, udp, or tcp-udp keywords. Enter the tcp-udp
keyword if your service uses both TCP and UDP with the same
port number, for example, DNS (port53).
The prompt changes to service configuration mode.
Step 2
Add one or more of the following group members:
port-object {eq port | range begin_port
end_port}
Example:
hostname(config-service)# port-object eq
domain
Defines the ports in the group. Enter the command for each port
or range of ports. For a list of permitted keywords and well-known
port assignments, see the “Protocols and Applications” section on
page 1-11.
group-object group_id
Example:
hostname(config-network)# group-object
Engineering_groups
Adds an existing object group under this object group. The nested
group must be of the same type.
Step 3
description text
Example:
hostname(config-service)# description DNS
Group
(Optional) Adds a description. The description can be up to 200
characters.

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English