cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
829
Views
0
Helpful
2
Replies

Service Objects and Groups in ASDM

Kevin Melton
Level 2
Level 2

I have been using ASDM for some time

now.  I have always had a quesiton about what exactly Service Groups are that are built using the Service type TCP/UDP vs.  ones that are specifically TCP or UDP.  Out of fear I have always built Service Groups for TCP only or for UDP only.

Lets say I need a Service Group that needs ports 102, 20000, and 21000 in it, but I am unsure if the ports need to be UDP or TCP.  If I create the Service Group using type TCP/UDP, will it allow both TCP and UDP in for the specific port?

Thanks

Kevin

1 Accepted Solution

Accepted Solutions

Jon Marshall
Hall of Fame
Hall of Fame

k-melton wrote:

I have been using ASDM for some time

now.  I have always had a quesiton about what exactly Service Groups are that are built using the Service type TCP/UDP vs.  ones that are specifically TCP or UDP.  Out of fear I have always built Service Groups for TCP only or for UDP only.

Lets say I need a Service Group that needs ports 102, 20000, and 21000 in it, but I am unsure if the ports need to be UDP or TCP.  If I create the Service Group using type TCP/UDP, will it allow both TCP and UDP in for the specific port?

Thanks

Kevin

Kevin

Yes it would. In fact that is exactly what service objects are used for ie. so you don't have to create 2 separate groups, one for TCP and one for UDP. So you would configure "object-group service tcp-udp" and then simply use service-objects to add your ports.

Jon

View solution in original post

2 Replies 2

Jon Marshall
Hall of Fame
Hall of Fame

k-melton wrote:

I have been using ASDM for some time

now.  I have always had a quesiton about what exactly Service Groups are that are built using the Service type TCP/UDP vs.  ones that are specifically TCP or UDP.  Out of fear I have always built Service Groups for TCP only or for UDP only.

Lets say I need a Service Group that needs ports 102, 20000, and 21000 in it, but I am unsure if the ports need to be UDP or TCP.  If I create the Service Group using type TCP/UDP, will it allow both TCP and UDP in for the specific port?

Thanks

Kevin

Kevin

Yes it would. In fact that is exactly what service objects are used for ie. so you don't have to create 2 separate groups, one for TCP and one for UDP. So you would configure "object-group service tcp-udp" and then simply use service-objects to add your ports.

Jon

Jon

Thanks for the quick response!

Kevin

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card