| 10.5 |  | Nested Object Groups |
| 10.5.4 |  | Multiple object groups in ACLs example |

| Figure illustrates multiple nested object groups configured so that one ACL entry enables remote hosts 172.26.26.50 and 172.26.26.51 to initiate FTP and SMTP connections to all local hosts in the ALLHOSTS group. Note that with object grouping configured, only one ACL entry is required. If object grouping were not configured, it would have required the ACL entries in Figure to filter traffic as required.