topic Re: ASA5550 access-list with object-groups. Getting an error. Ne in Network Security https://community.cisco.com/t5/network-security/asa5550-access-list-with-object-groups-getting-an-error-need/m-p/758709#M1002686 <HTML><HEAD></HEAD><BODY><P>That was it. Thank you. I removed the "protocol-object ip" from the PROT object-group and voila it worked. Thanks once again.</P></BODY></HTML> Thu, 21 Jun 2007 19:04:36 GMT mpala01 2007-06-21T19:04:36Z ASA5550 access-list with object-groups. Getting an error. Need help https://community.cisco.com/t5/network-security/asa5550-access-list-with-object-groups-getting-an-error-need/m-p/758707#M1002646 <P>ASA 5550. Version 7.1(2). I'm getting the following error when configuring an access-list with object-groups:</P><P>ERROR: extra command argument(s)</P><P>Usage:</P><P></P><P>This is what i have. Don't know whats wrong. Please help.</P><P></P><P>object-group network XYZ_MGMT_NETS</P><P> description XYZ Management Networks</P><P> network-object 10.110.64.0 255.255.248.0</P><P> network-object 10.110.100.0 255.255.252.0</P><P> network-object 10.110.124.0 255.255.252.0</P><P>object-group service MGMT_APPS tcp-udp</P><P> description XYZ Management Apps</P><P> port-object eq 123</P><P> port-object eq tacacs</P><P> port-object eq 69</P><P> port-object eq 162</P><P> port-object eq 514</P><P>object-group protocol PROT</P><P> description protocols (tcp/udp) for XYZ Mgmt</P><P> protocol-object ip</P><P> protocol-object tcp</P><P> protocol-object udp</P><P></P><P>access-list acl_manage3 extended permit object-group PROT any object-group XYZ_MGMT_NETS object-group MGMT_APPS</P><P></P><P></P> Mon, 11 Mar 2019 10:33:37 GMT https://community.cisco.com/t5/network-security/asa5550-access-list-with-object-groups-getting-an-error-need/m-p/758707#M1002646 mpala01 2019-03-11T10:33:37Z Re: ASA5550 access-list with object-groups. Getting an error. Ne https://community.cisco.com/t5/network-security/asa5550-access-list-with-object-groups-getting-an-error-need/m-p/758708#M1002649 <HTML><HEAD></HEAD><BODY><P>Could there be a problem with your protocol group, -assuming I am reading it right, with an ip object inside of a tcp/udp protocol group? If tcp/udp protocols are a subset of ip will the protocol group still work? </P></BODY></HTML> Thu, 21 Jun 2007 17:53:00 GMT https://community.cisco.com/t5/network-security/asa5550-access-list-with-object-groups-getting-an-error-need/m-p/758708#M1002649 nihpacsris 2007-06-21T17:53:00Z Re: ASA5550 access-list with object-groups. Getting an error. Ne https://community.cisco.com/t5/network-security/asa5550-access-list-with-object-groups-getting-an-error-need/m-p/758709#M1002686 <HTML><HEAD></HEAD><BODY><P>That was it. Thank you. I removed the "protocol-object ip" from the PROT object-group and voila it worked. Thanks once again.</P></BODY></HTML> Thu, 21 Jun 2007 19:04:36 GMT https://community.cisco.com/t5/network-security/asa5550-access-list-with-object-groups-getting-an-error-need/m-p/758709#M1002686 mpala01 2007-06-21T19:04:36Z