topic Hi Marius,I tried to carry in Network Security

class-map type inspect match access-group name question

juan-ruiz — Tue, 12 Mar 2019 04:45:56 GMT

I'm creating a zone base firewall solution and all appears to be fine until I create a class-map type inspect match-all or any

and match access-group name acl to match an extended ACL and once I match it the commands runs but when I go back to view the configuration of the class-map it is not there.

I have tried other named ACLs and it works if the ACL contents are simple like permit ip any any but for complex ACLs with ranges, tcp, udp, icmp etc etc it does not take it but it does not report an issue either and when I view the config its not there for the complex extended acl but for the simple extended acl it does show.

Any restrictions or possible bugs I'm running into?

Thanks for all looking

This could be a bug. Could

Marius Gunnerud — Wed, 17 Sep 2014 07:51:38 GMT

This could be a bug. Could you post the exact configuration you are trying to implement? I just set up a small test and I have been unable to reproduce what you are seeing. I would like to see if I get the same result using your config.

Please remember to select a correct answer and rate helpful posts

Hi Marius,I tried to carry

juan-ruiz — Wed, 17 Sep 2014 14:34:15 GMT

Hi Marius,

I tried to carry out this same config on a router running 15.x code and the message I got back is

access-lists with 'log' keyword are not supported so I removed the log from the acl and it worked fine.

Thanks for the reply back.

Regards,

Juan

Ah yes, that would do it.

Marius Gunnerud — Wed, 17 Sep 2014 21:10:03 GMT

Ah yes, that would do it. But you didn't mention that in your original post which is why its always good to provide the configuration you are working with in the post 😉

Glad you got it sorted

Please remember to select a correct answer and rate helpful posts

Thank you for your time.

juan-ruiz — Thu, 18 Sep 2014 13:32:51 GMT

Thank you for your time.