How to find certain "network-object" belong to which "object-group"?

Unanswered Question
Sep 22nd, 2010
User Badges:

Let say I want to find which access-list is using ip address

I start the searching by issue sh run | i

ASA5520# sh run | i
name net-ABC

Then I found  ip address is mapped to net-ABC

I run sh run | i net-ABC command to find which access-list is using it and I got this output.

ASA5520# sh run | i net-ABC
name net-ABC
network-object net-ABC

Is there any command to filter network-object net-ABC belong to any object-group?

Yes, I can find this by using command sh run object-group. This command is very useful if there are not many object-group. However, it's hard to filter if there are a lot of object-group in the firewall.

ASA5520# sh run object-group
object-group network net-XYZ                                                                                                      
network-object net-ABC                                                                                            
network-object net-DEF

Thanks in advance

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Nagaraja Thanthry Wed, 09/22/2010 - 05:44
User Badges:
  • Cisco Employee,


You can try the following:

Turn off the "names" feature so all names are converted to IP addresses in the configuration:

"no names"

show access-list | i

show run | i

show run object-group | be

Once you are done with finding the information, turn on the names


Hope this helps.




This Discussion