Cisco Systems ASA5515K9, ASA 5500 Adding an ICMP Type Object Group

13-9
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter13 Configuring Objects
Configuring Objects and Groups
hostname (config-service)# port-object eq radius-acct
hostname (config)# object-group service services3 tcp
hostname (config-service)# description LDAP Group
hostname (config-service)# port-object eq ldap
Adding an ICMP Type Object Group
To add or change an ICMP type object group, perform the steps in this section. After you add the group,
you can add more objects as required by following this procedure again for the same group name and
specifying additional objects. You do not need to reenter existing objects; the commands you already set
remain in place unless you remove them with the no form of the command.
Detailed Steps
Example
Create an ICMP type group that includes echo-reply and echo (for controlling ping) by entering the
following commands:
hostname (config)# object-group icmp-type ping
hostname (config-service)# description Ping Group
hostname (config-service)# icmp-object echo
hostname (config-service)# icmp-object echo-reply
Command Purpose
Step1 object-group icmp-type grp_id
Example:
hostname(config)# object-group icmp-type
ping
Adds an ICMP type object group. The grp_id is a text string up to
64 characters in length and can be any combination of letters,
digits, and the following characters:
•underscore “_”
•dash “-”
•period “.”
The prompt changes to ICMP type configuration mode.
Step2 description text
Example:
hostname(config-icmp-type)# description
Ping Group
(Optional) Adds a description. The description can be up to 200
characters.
Step3 icmp-object icmp-type
Example:
hostname(config-icmp-type)# icmp-object
echo-reply
Defines the ICMP types in the group. Enter the command for each
type. For a list of ICMP types, see the“ICMP Types” section on
page B-15.