Object Group Network

Network object groups define collections of IPv4 host addresses, network/subnet-mask pairs, and address ranges that can be referenced by access control lists and zone-based firewall policies. They simplify ACL management by allowing reusable named groups of network entries.

Diagram

Classes

configuration (iosxe.devices)

Name	Type	Constraint	Mandatory	Default Value
object_groups_network	List	[object_groups_network]	No

object_groups_network (iosxe.devices.configuration)

Name	Type	Constraint	Mandatory	Default Value
name	String		Yes
description	String		No
hosts	List	Any[IP or String]	No
network_addresses	List	[network_addresses]	No
address_ranges	List	[address_ranges]	No
group_objects	List	String	No

network_addresses (iosxe.devices.configuration.object_groups_network)

Name	Type	Constraint	Mandatory	Default Value
address	IP		Yes
mask	IP		Yes

address_ranges (iosxe.devices.configuration.object_groups_network)

Name	Type	Constraint	Mandatory	Default Value
start	IP		Yes
end	IP		Yes

Object Group Network Parameters:

• Name - Unique identifier for the network object group (1-64 characters)
• Description - Optional description text (1-200 characters)
• Hosts - List of individual IPv4 host addresses
• Network Addresses - List of network address and subnet mask pairs
• Address Ranges - List of start/end IPv4 address pairs defining contiguous ranges
• Group Objects - References to other network object groups for nesting

Guidelines and Limitations

• Host entries are individual IPv4 addresses (e.g., 10.1.1.1).
• Network addresses use address + subnet mask notation (e.g., 10.1.2.0 / 255.255.255.0).
• Address ranges define contiguous IP ranges with a start and end address (e.g., 10.1.3.1 to 10.1.3.10).
• Group objects reference other network object groups by name. The referenced group must already be defined.

Sample Configuration:

object-group network SERVERS
 description Production server group
 host 10.1.1.1
 host 10.1.1.2
 10.1.2.0 255.255.255.0
 range 10.1.3.1 10.1.3.10
 group-object BACKUP_SERVERS
!

Example Code:

iosxe:
  devices:
    - name: ROUTER-1
      configuration:
        object_groups_network:
          - name: SERVERS
            description: Production server group
            hosts:
              - 10.1.1.1
              - 10.1.1.2
            network_addresses:
              - address: 10.1.2.0
                mask: 255.255.255.0
            address_ranges:
              - start: 10.1.3.1
                end: 10.1.3.10
            group_objects:
              - BACKUP_SERVERS