嵌套式对象分组

object-group protocol 50
 protocol-object tcp
 protocol-object udp
 protocol-object icmp

object-group icmp-type 100
 icmp-object echo
 icmp-object echo-reply

object-group protocol 60          ----创建协议分组60
 group-object 50                  ----在60中调用了50的协议分组
 protocol-object gre
 protocol-object snp

object-group icmp-type 110        ----创建icmp类型分组110
 group-object 100                 ----在110中调用100的icmp类型分组
 icmp-object time-exceeded
 icmp-object mask-reply

 

show object-group [ protocol | service | icmp-type | network ]
show object-group id [对象分组名字]

clear object-group [ protocol | service | icmp-type | network ]

no object-group protocol | icmp-type | network
no object-group service [对象分组名字] { tcp | udp | tcp-udp }