cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1881
Views
0
Helpful
1
Replies

object-group based ACLs on 3850 switch

andrewswanson
Level 7
Level 7

Hello

I'm looking at getting OGACLs working on a WS-C3850-24P (03.03.02SE with IPServices Licence). The link below shows object-groups being used with ACLs on a 3850:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/xe-3se/3850/sec-data-acl-xe-3se-3850-book.pdf

There is no "service object-group" or "object-group" commands available on the switch and when I create an extended ACL and create an ACE, there are no options to reference an object-group.

Has anyone implemented ogacls on a 3850 successfully?

Thanks
Andy

1 Reply 1

ciscor1senb
Level 1
Level 1

Has anyone able to use object-group options on a Cisco 3850?

I would like to know if this is supported on some release? I'm running IOS-EX 03.07.00E code. I would like to be able to use domain listing in object groups to create deny statement in WCCP for an O365 deployment. Would object groups support FQDN names?

This is because Microsoft recommends that O365 traffic from Client to the internet be unfiltered!!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: