This chapter describes hybrid ACLs and object-group ACLs on the Cisco 8000 Series Router, including network and port object-group configuration, compression verification, and 24-bit bincode support for egress object-group ACLs.
This chapter contains the following sections:
Hybrid ACLs
This topic describes hybrid ACLs, also known as object-group ACLs on the Cisco 8000 Series Router, which simplify access control by grouping users, devices, or protocols into object groups and reducing the number of Access Control Entries (ACEs).
Configure a hybrid ACL
This topic describes the prerequisites and restrictions for configuring an hybrid or hyrid ACL.
Verify hybrid ACL compression
This topic describes how to verify the configured object-group ACLs in operation and the compression of the ACEs in the ACL on the Cisco 8000 Series Router.
24 bit bincode support for egress object group ACLs
This topic describes 24 bit bincode support for egress object group ACLs on the Cisco 8000 Series Router, which increases the result key size to support complex access lists that exceed the 14 bit limit.
IPv6 extension headers in ingress IPv6 hybrid ACLs
This topic describes how ingress IPv6 hybrid ACLs with compression level 2 can filter packets on the basis of IPv6 extension headers on the Cisco 8000 Series Router.