Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Service Objects and Groups in ASDM

I have been using ASDM for some time

now.  I have always had a quesiton about what exactly Service Groups are that are built using the Service type TCP/UDP vs.  ones that are specifically TCP or UDP.  Out of fear I have always built Service Groups for TCP only or for UDP only.

Lets say I need a Service Group that needs ports 102, 20000, and 21000 in it, but I am unsure if the ports need to be UDP or TCP.  If I create the Service Group using type TCP/UDP, will it allow both TCP and UDP in for the specific port?

Thanks

Kevin

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Blue

Re: Service Objects and Groups in ASDM

k-melton wrote:

I have been using ASDM for some time

now.  I have always had a quesiton about what exactly Service Groups are that are built using the Service type TCP/UDP vs.  ones that are specifically TCP or UDP.  Out of fear I have always built Service Groups for TCP only or for UDP only.

Lets say I need a Service Group that needs ports 102, 20000, and 21000 in it, but I am unsure if the ports need to be UDP or TCP.  If I create the Service Group using type TCP/UDP, will it allow both TCP and UDP in for the specific port?

Thanks

Kevin

Kevin

Yes it would. In fact that is exactly what service objects are used for ie. so you don't have to create 2 separate groups, one for TCP and one for UDP. So you would configure "object-group service tcp-udp" and then simply use service-objects to add your ports.

Jon

2 REPLIES
Hall of Fame Super Blue

Re: Service Objects and Groups in ASDM

k-melton wrote:

I have been using ASDM for some time

now.  I have always had a quesiton about what exactly Service Groups are that are built using the Service type TCP/UDP vs.  ones that are specifically TCP or UDP.  Out of fear I have always built Service Groups for TCP only or for UDP only.

Lets say I need a Service Group that needs ports 102, 20000, and 21000 in it, but I am unsure if the ports need to be UDP or TCP.  If I create the Service Group using type TCP/UDP, will it allow both TCP and UDP in for the specific port?

Thanks

Kevin

Kevin

Yes it would. In fact that is exactly what service objects are used for ie. so you don't have to create 2 separate groups, one for TCP and one for UDP. So you would configure "object-group service tcp-udp" and then simply use service-objects to add your ports.

Jon

New Member

Re: Service Objects and Groups in ASDM

Jon

Thanks for the quick response!

Kevin

351
Views
0
Helpful
2
Replies