| 场景 | 多个服务器/端口重复引用 |
|---|---|
| 适用 | 三厂（部分华为型号支持 ip address-set） |
思科 IOS
思科 IOS
object-group network SRV
host 10.1.1.10
host 10.1.1.11
object-group service WEB tcp
eq 80
eq 443
access-list 101 permit tcp 192.168.10.0 0.0.0.255 object-group SRV object-group WEB华为 VRP
华为 VRP
ip address-set SRV type object
address 0 10.1.1.10 mask 32
address 1 10.1.1.11 mask 32
acl number 3000
rule 5 permit tcp source 192.168.10.0 0.0.0.255 destination-address-set SRV destination-port eq 443H3C Comware
H3C Comware
object-group ip address SRV
0 host address 10.1.1.10
1 host address 10.1.1.11
acl advanced 3000
rule 5 permit tcp source 192.168.10.0 0.0.0.255 destination-address SRV destination-port eq 443差异：三厂都有对象组能力但命令不通用；不支持对象组的低端型号上，只能老老实实一条条写 rule（ACL 规则条数会有上限）。