It
To specify a less-than group member for an IP port object group, use the lt command. A less-than group
member matches port numbers that are less than (and not equal to) the port number specified in the entry. To
remove a greater-than group member from port object group, use the no form of this command.
[ sequence-number ] lt port-number
no {sequence-number| lt port-number}
Syntax Description
(Optional) Sequence number for this group member.
Sequence numbers maintain the order of group
members within an object group. Valid sequence
numbers are from 1 to 4294967295. If you do not
specify a sequence number, the device assigns a
number that is 10 greater than the largest sequence
number in the current object group.
sequence-number
Port number that traffic matching this group member
does not exceed or equal. Valid values are from 0 to
65535.
port-number
Command Default
None
Command Modes
IP port object group configuration
Command History
ModificationRelease
This command was introduced.4.0(1)
Usage Guidelines
IP port object groups are not directional. Whether a lt command matches a source or destination port or
whether it applies to inbound or outbound traffic depends upon how you use the object group in an ACL.
This command does not require a license.
Examples
This example shows how to configure an IP port object group named port-group-05 with a group member
that matches traffic sent to or from port 1 through port 49151:
switch# configure terminal
switch(config)# object-group ip port port-group-05
switch(config-port-ogroup)# lt 49152
Cisco Nexus 7000 Series Security Command Reference
490
L Commands
It