Cisco ASA 5512-X Cli Configuration Guide

1-2
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Objects
Configuring Objects
Firewall Mode Guidelines
Supported in routed and transparent firewall mode.
IPv6 Guidelines
• Supports IPv6.
• The ASA does not support IPv6 nested network object groups, so you cannot group an object with
IPv6 entries under another IPv6 object group.
• You can mix IPv4 and IPv6 entries in a network object group; you cannot use a mixed object group
for NAT.
Additional Guidelines and Limitations
• Object must have unique names. While you might want to create a network object group named
“Engineering” and a service object group named “Engineering,” you need to add an identifier (or
“tag”) to the end of at least one object group name to make it unique. For example, you can use the
names “Engineering_admins” and “Engineering_hosts” to make the object group names unique and
to aid in identification.
• Objects and object groups share the same name space.
• You cannot remove an object or make an object empty if it is used in a command.
Configuring Objects
• Configuring Network Objects and Groups, page 1-2
• Configuring Service Objects and Service Groups, page 1-5
• Configuring Local User Groups, page 1-11
• Configuring Security Group Object Groups, page 1-13
• Configuring Regular Expressions, page 1-14
• Configuring Time Ranges, page 1-18
Configuring Network Objects and Groups
This section describes how to configure network objects and groups, and it includes the following topics:
• Configuring a Network Object, page 1-2
• Configuring a Network Object Group, page 1-3
Configuring a Network Object
A network object can contain a host, a network IP address, or a range of IP addresses, a fully qualified
domain name (FQDN). You can also enable NAT rules on the object (excepting FQDN objects). (See
Chapter 1, “Configuring Network Object NAT,” for more information.)

Cisco ASA 5512-X Specifications

General

Brand	Cisco
Model	ASA 5512-X
Category	Firewall
Language	English