Friday 2 October 2020

find what objects an IP is a member of in cisco ASA CLI

 sh run object-group network | i object-group|192.168.1.100


It will spit out all the object-groups and you scroll down until you see the one that has your IP inside.


It will look like this. we found 192.168.1.100 is a member of DNS_FORWARDERS

object-group network DomainControllers

object-group network DNS_FORWARDERS

 network-object host 192.168.1.100

object-group network smtprelay_group

object-group network Office365relayIPs_Group

remember to keep scrolling as it could be a member of more groups.


No comments:

Post a Comment