Cisco Nexus 7000 Series - Object-Group (Identity Policy)

object-group (identity policy)
To specify a MAC access control list (ACL) for an identity policy, use the object-group command. To remove
ACL from the identity policy, use the no form of this command.
object-group acl-name
no object-group acl-name
Syntax Description
Name of a MAC ACL. The name is case sensitive.
acl-name
Command Default
None
Command Modes
Identity policy configuration
Command History
ModificationRelease
This command was introduced.4.0(1)
Usage Guidelines
Use the mac access-list command to create the MAC ACL to assign to the identity policy.
This command does not require a license.
Examples
This example shows how to configure an ACL for an identity policy:
switch# configure terminal
switch(config)# identity policy AdminPolicy
switch(config-id-policy)# object-group
This example shows how to remove an ACL from an identity policy:
switch# configure terminal
switch(config)# identity policy AdminPolicy
switch(config-id-policy)# no object-group
Related Commands
DescriptionCommand
Creates or specifies an identity policy and enters
identity policy configuration mode.
identity policy
Creates a MAC ACL and enters MAC ACL
configuration mode.
mac access-list
Displays identity policy information.show identity policy
Cisco Nexus 7000 Series Security Command Reference
516
O Commands
object-group (identity policy)