| 10.4 |  | Object Grouping |
| 10.4.3 |  | Configuring object groups |

| The previous demonstration illustrated the process of configuring object groups. This section will examine the specific commands used to configure object groups. It will focus on the first two steps of the process, which are configuring the object group command and defining the object group in subcommand mode.

object-group command
The first command that will be looked at is the object-group command. This command defines which type of object group will be created. The options that exist are:

- Network groups
- Service groups
- Protocol groups
- ICMP groups

Once this command is entered, it will take the user to the object group subcommand that corresponds to the object group type that is being used. The Online Command Reference illustrates these commands and explains their syntax.

Object group subcommands
As stated above, once the administrator has defined the type of object group that is to be created, the sub-command prompt that corresponds to that type of object group will be displayed. The items that are to be included in the object group will be defined.

For example, if a network object group is to be configured, the administrator would define a network object group. This would then take the administrator to the network object group sub-command prompt. Here the hosts and or networks that were to be part of the object group would be defined.

Alternatively, if a services object group were being used, the administrator would enter that sub-command mode and define the TCP or UDP port numbers that were to be part of the object group.

| Web Links Object Groups http://www.cisco.com/en/US/products/hw/ vpndevc/ps2030/products_tech_note09186 a00800d641d.shtml