On Mar 24, 2010, at 4:46 AM, Phil Mayers wrote: > As I said, the router knows these IPs, so I don't understand why it can't populate an object-group (in sufficiently recent IOS) allowing it's use in either iACLs or CoPP. +1 -Tk