4.
Enter one of the following commands:
•
no sequence-number
•
no host IPv6-address
•
no IPv6-address
/
prefix-len
•
no IPv6-address network-wildcard
5.
(Optional)
show object-group name
6.
(Optional)
copy running-config startup-config
DETAILED STEPS
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Creates the IPv6 address object group and enters IPv6
address object-group configuration mode.
object-group ipv6 address name
Example:
Step 2
switch(config)# object-group ipv6 address
ipv6-addr-group-A7
switch(config-ipv6addr-ogroup)#
Creates an entry in the object group. For each entry that
you want to create, use the
host
command and specify a
Enter one of the following commands:
Step 3
• [
sequence-number
]
host IPv6-address
single host, or omit the
host
command to specify a network
of hosts.
• [
sequence-number
]
IPv6-address
/
prefix-len
• [
sequence-number
]
IPv6-address network-wildcard
You can specify a prefix length for an IPv6 object group,
which matches only on the first contiguous bits, or you can
Example:
specify a wildcard mask, which matches on any bit in the
switch(config-ipv6addr-ogroup)# host
2001:db8:0:3ab0::1
address. IPv6 wildcard masks are supported for Cisco Nexus
9200, 9300-EX, and 9300-FX/FX2/FXP switches and the
Cisco Nexus 9364C switch.
Example:
switch(config-ipv6addr-ogroup)# 10 1::1 2::2
Removes an entry from the object group. For each entry
that you want to remove from the object group, use the
no
form of the
host
command.
Enter one of the following commands:
Step 4
•
no sequence-number
•
no host IPv6-address
•
no IPv6-address
/
prefix-len
•
no IPv6-address network-wildcard
Example:
switch(config-ipv6addr-ogroup)# no host
2001:db8:0:3ab0::1
Displays the object group configuration.
(Optional)
show object-group name
Example:
Step 5
switch(config-ipv6addr-ogroup)# show object-group
ipv6-addr-group-A7
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
276
Configuring IP ACLs
Creating and Changing an IPv6 Address Object Group
