topic Re: Access-list shows in ASDM/GUI but not running config in Network Security

Ac

CiscoBrownBelt — Wed, 21 Jul 2021 20:40:52 GMT

I just noticed that an ACL shows in ASDM fine but nowhere to be found in running-config all!

Could my NVRAM or something be bad on ASA5585?

Re: Access-list shows in ASDM/GUI but not running config

balaji.bandi — Thu, 01 Jul 2021 16:25:44 GMT

have clicked save and apply ?

Re: Access-list shows in ASDM/GUI but not running config

Sheraz.Salim — Thu, 01 Jul 2021 17:18:47 GMT

What is the software version you on ASA and what is the ASDM Image? Did you apply click the apply button at ASDM to push the configuration?

Just a site note enable command preview on ASDM. First open up ASDM and go to Tools -> Preferences: Then on the General Tab, you’ll see under the Communications section an option titled “Preview commands before sending them to the device.” Check that little check box there and hit Okay.

enabling this you can take the copy of your configuration before pushing to the ASA incase if the configuration not pushed least you have the command you can either do it from SSH CLI.

Re: Access-list shows in ASDM/GUI but not running config

CiscoBrownBelt — Thu, 01 Jul 2021 18:32:56 GMT

Yes, save. Etc.

Re: Access-list shows in ASDM/GUI but not running config

CiscoBrownBelt — Thu, 01 Jul 2021 18:38:43 GMT

Awesome.

So the ACL has numerous entiies which is shown on GUI but not running config. Very strange

Re: Access-list shows in ASDM/GUI but not running config

Sheraz.Salim — Thu, 01 Jul 2021 20:04:29 GMT

Cisco BlueBelt_Stripe just make sure you are running ASA code compatibility with ASDM. I have seem in past where the software ASDM was not compatible with ASA code give you strange issue/behavior.

you have not mentioned what software ASA code and what ASDM you running. here on this page you can match if you are running the ASA code with is compatible with ASDM.

Could my NVRAM or something be bad on ASA5585?

- I do not think so if this is the case you can issue "dir flash:" to check/see it.

If i get is right you can see the ACL entries on ASDM but when you SSH to the unit you do not see the ACL. Stupid question but have you issue the command "show run" or "show run all" or "more system:running-config"

Re: Access-list shows in ASDM/GUI but not running config

Marius Gunnerud — Thu, 01 Jul 2021 21:22:37 GMT

I have seen this issue before. For me upgrading ASA and ASDM images solved the issue.

Re: Access-list shows in ASDM/GUI but not running config

CiscoBrownBelt — Fri, 02 Jul 2021 13:10:22 GMT

Yes what I had in mind

Re: Access-list shows in ASDM/GUI but not running config

CiscoBrownBelt — Fri, 02 Jul 2021 13:13:58 GMT

ASA version 9.6(3)1

ASDM 7.8(1)

Yes I click apply. Actually first I did command via CLI, then that entry is only shown on Advanced>ACL manager and not under Access rules. So no other entries of the ACL (which indeed is applied otherwise lots of traffic would not work) is not shown in running config

Re: Access-list shows in ASDM/GUI but not running config

Sheraz.Salim — Fri, 02 Jul 2021 14:57:57 GMT

CiscoBlueBelt_Strip. l love your name 🙂

anyway I just look at cisco ASDM matrix here is the support version for you ASA Code.

where as you running 7.8(1). would be good if you match according to cisco guidelines.

Re: Access-list shows in ASDM/GUI but not running config

CiscoBrownBelt — Wed, 14 Jul 2021 14:33:18 GMT

Hi, yes I noticed it is not matching. Upon doing more t-shooting, appears ASA does not like objects or groups. Added rules that still would not allow traffic, but only worked if just using IP instead of an object in the ACL statement. Weird. Packet-tracer would show rules should work and all, but packet captures showed traffic not moving betweeen interfaces, and montiring log would show it was being denied. Any other ideas besides matching versions?

Thanks. Just noticed name should be Cisco_Blue_Belt_1_stripe LOL as I promoted myself. Will be changing color soon 🙂