application-group

Description

Use the application-group command to specify a group of (one or more) applications.

Use no application-group to remove one or more applications from an application group or to delete the group, itself.

Syntax

application-group <application group name> <app1> [, <app2>, <app3>…]

no application-group <application group name> [, <app1>, <app2>…]

 

Arguments

<application group name>	Defines a unique group name. The name is checked against existing application groups and, if the name does not exist, the CLI creates it. If the name does exist, then the application(s) you specify are added to the existing group.
<app>	Specifies an existing application name, whether it’s built-in or user-defined.

 

Defaults

None.

Command Mode

Global Configuration Mode

See Also

See the following related commands:

n	“access-list”

n	“show application”

Usage Guidelines

If your ACLs or policy maps contain match conditions that involve multiple applications, you can simplify the match conditions with application groups. Application groups are identifiers that you can create to represent a list of applications.

You create an application group by naming the group and specifying at least one application that belongs in it. After creating it, you can modify the application group by adding or removing applications.

To add applications to an application group that already exists, enter the name of the application group, followed by the applications you are adding. For example, to add two applications to the application group, omega, you might use the following command:

(config) # application-group omega http, tftp

 

If omega did not exist, the CLI would create it and it would contain these two applications.

If you then wanted to remove http from omega, you would issue the following command:

(config) # no application-group omega http

 

The application-group command has the following restrictions:

n	If you specify more than one application at a time for an application group, you must separate the applications with commas. If you just use spaces, the CLI will respond with an error message.

n	If you attempt to delete an application that is not in the application group that you specify, then the CLI displays an error message.

Examples

To create an application group, encrypted, that contains the applications SSH, HTTPS, and SFTP:

(config) # application-group encrypted ssh, https, sftp

To add two applications to the existing application group, omega:

(config) # application-group omega http, tftp

 

 

Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com.