Link to home
Start Free TrialLog in
Avatar of Techrunner
Techrunner

asked on

Better way of naming object in Cisco ASA

Hello Experts

I want some help with object naming Cisco ASA. What is the best method do you use for better management ?
For example I have below requirement hence what will be the efficient way to do it.

192.168.100.0 /24	TCP	10.10000.136.33	               20,21,1234,5660,5900,9044,9903,443
192.168.100.0 /24	TCP	10.100.136.34	                               20,21,22,80,5660,9055,443
192.168.100.0 /24	TCP	10.100.136.35	                               80,3389,5900,443 
192.168.100.0 /24	TCP	10.100.136.36	                               3389,5631,443 
192.168.100.0 /24	TCP	10.100.1.251	                               22,443,8080
192.168.100.0 /24	TCP	10.100.1.236	                               22,5800,5900,443 
192.168.100.0 /24	TCP	10.100.1.245	                               20,21,22,23,5660,9055,443 
192.168.100.0 /24	TCP	10.100.1.247	                               22,5800,5900,443,8000 
192.168.100.0 /24	TCP	10.100.1.151	                               443 
192.168.100.0 /24	TCP	10.100.1.252	                               22,5900,443 
192.168.100.0 /24	TCP	10.100.136.38	                              20,21,443 
			

Open in new window


Appreciating any help and suggestions
Avatar of kevinhsieh
kevinhsieh
Flag of United States of America image

Well, you could name 192.168.100.0/24 as net-192.168.100.0-24
Name a host as h-10.100.136.34

I don't know if it makes sense to create service groups for the ports.
You should find the hostname or services for the IP addresses you provided.  Without knowing that, any object or service (or group) names would not make any sense.
Avatar of Techrunner
Techrunner

ASKER

Actually, there is no specific name for the services
I know only the purpose of creating those groups :)
ASKER CERTIFIED SOLUTION
Avatar of aleghart
aleghart
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I tend to use...

OBJ-NAME for normal objects, OBJ-GP-NAME for Object Groups, and OBJ-S-Name for service groups, Generally all Cisco IOS is in Lower case. so I always create objects in upper case as they stand out in the config, (not just for groups, MPF objects, ACLs etc as well).

But thats just my personal preference

Pete
+1 for using upper case
Thank you experts for reponse
But what name should be given to service group if there a lot of services involved such as 20,21,1234,5660,5900,9044,9903,443
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial