Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

object-group based ACLs on 3850 switch

Hello

I'm looking at getting OGACLs working on a WS-C3850-24P (03.03.02SE with IPServices Licence). The link below shows object-groups being used with ACLs on a 3850:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/xe-3se/3850/sec-data-acl-xe-3se-3850-book.pdf

There is no "service object-group" or "object-group" commands available on the switch and when I create an extended ACL and create an ACE, there are no options to reference an object-group.

Has anyone implemented ogacls on a 3850 successfully?

Thanks
Andy

1 REPLY
New Member

Has anyone able to use object

Has anyone able to use object-group options on a Cisco 3850?

I would like to know if this is supported on some release? I'm running IOS-EX 03.07.00E code. I would like to be able to use domain listing in object groups to create deny statement in WCCP for an O365 deployment. Would object groups support FQDN names?

This is because Microsoft recommends that O365 traffic from Client to the internet be unfiltered!!

714
Views
0
Helpful
1
Replies