Cisco Catalyst 4500 Series Software Configuration Guide

62-43
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 62 Configuring Network Security with ACLs
Configuring Object Group ACLs
Configuring an IPv4 OG ACL
When creating an object group ACL, configure an ACL that references one or more object groups. As
with conventional ACLs, you can associate the same access policy with one or more interfaces.
You can define multiple ACEs that reference object groups within the same object group ACL. You can
also reuse a specific object group in multiple ACEs. To create an object group ACL, perform the
following task:
Step 7
group-object nested-object-group-name
Example:
Switch(config-service-group)# group-object
my-nested-object-group
(Optional) Specifies a nested (child) object group to be
included in the current (parent) object group.
The child object group type must match that of the parent
(for example, if you are creating a network object group,
you must specify another network object group as the
child).
You can use duplicate objects in an object group only by
nesting group objects. For example, if object 1 is in both
group A and group B, you can define a group C that
includes both A and B. However, you cannot include a
group object that causes the group hierarchy to become
circular (for example, you cannot include group A in group
B and then also include group B in group A).
While you can have an unlimited number of nested levels
we recommend a maximum of two levels.
Step 8
Repeat the steps until you have specified objects on
which you want to base your object group.
—
Step 9
end
Example:
Switch(config-network-group)# end
Exits network object-group configuration mode and returns
to privileged EXEC mode.
Command or Action Purpose
Command or Action Purpose
Step 1
configure terminal
Example:
Switch# configure terminal
Enters global configuration mode.
Step 2
ip access-list extended access-list-name
Example:
Switch(config)# ip access-list extended
my-ogacl-policy
Defines an extended IP access list using a name and enters
extended access-list configuration mode.

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E