Cisco Pix Access list Question

Posted on 2006-03-22
Last Modified: 2013-11-16
I would like to create an access list that has access to certain services. My question is the following:

Is there a way to create a group of ips (not a range) and then only have to write one access-list command. This way i could simply add ips to the group when i when to grant them access

Question by:inf2300
    1 Comment
    LVL 19

    Accepted Solution

    Yes - you can use the object-group command

    For example - if you want to allow www access in to several web servers on non-sequential ip addresses :

    conf t
    object-group network wwwservers
    network-object host
    network-object host
    network-object host
    network-object host
    network-object host
    network-object host

    access-list fromoutside permit tcp any object-group wwwservers eq www

    You can now add hosts to the object group as needed and they will be applied.

    hope this helps


    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
    I recently updated from an old PIX platform to the new ASA platform.  While upgrading, I was tremendously confused about how the VPN and AnyConnect licensing works.  It turns out that the ASA has 3 different VPN licensing schemes. "site-to-site" …
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    24 Experts available now in Live!

    Get 1:1 Help Now