topic Hi Thomas, in Network Security

Policy-map type inspect ipv6- match header destination-header

f-cagica — Tue, 12 Mar 2019 07:33:26 GMT

Hello experts,

while configuring some ASA Firewalls for IPv6 dual-stack i've noticed that 9.1(7) doesn't have anymore the option "match header destination-option" (under Policy-map type inspect ipv6) available. Not sure why... also not able to find any bug or mention to it in the release notes... is anyone aware of it?

Thanks,

Fernando

Hello Fernando,

Thomas Bille Joergensen — Fri, 01 Apr 2016 11:27:52 GMT

Hello Fernando,

Please see the following note taken from "Release Notes for the Cisco ASA Series, 9.1(x)". This could be a solution.

Note: Version 9.1(7) was removed from Cisco.com due to build issues; please upgrade to Version 9.1(7.4) or later.

Regards,

Thomas

Hi Thomas, thanks. Fernando

f-cagica — Sun, 03 Apr 2016 14:40:58 GMT

Hi Thomas,

thanks.

Fernando

Good to hear, you're welcome

Thomas Bille Joergensen — Mon, 04 Apr 2016 06:29:40 GMT

Good to hear, you're welcome 🙂

Regards,

Thomas

Hi Thomas,

mbudhira — Wed, 06 Apr 2016 14:04:55 GMT

Hi Thomas,

We are facing the same issue on 9.1(7.4), Any suggestions on this?

Thanks in advance

Regards

Mahak

Hello Mahak,

Thomas Bille Joergensen — Thu, 07 Apr 2016 11:25:56 GMT

Hello Mahak,

Well, I would probably check any migration or error log files on the flash drive. If nothing relevant here, you could backup your configuration, do a 'wr erase', download the image file again from the website and put it back on the ASA for a clean install. Then you could check if the command exists.

It is also adviseable to run the verify command on the file and compare hash value to the one on the website.

Regards,

Thomas