topic Re: Problem negating a command in PIX in Network Security

Problem negating a command in PIX

aafkhami — Fri, 21 Feb 2020 06:15:50 GMT

Hello,

I have a PIX 525 and have a problem removing a line from configuration. What happened:

I tried to add an ip route with 20 bits subnet mask (255.255.240.0) but it was accepted as 255.255.0.240 (don't know why and I could see I typed it correctly in the terminal emulator). Now if I use "no ip route ..." it gives me error "Invalid IP mask 255.255.0.240).

I added the correct route later, however don't know how to get rid of this wrong one. Any idea?

Thanks a lot,

Ali

Re: Problem negating a command in PIX

steve.barlow — Mon, 23 Sep 2002 16:36:45 GMT

I have tried removing commands but it wouldn't let me, so I did a wr mem, then removed it and it accepted it. Try that.

Steve

Re: Problem negating a command in PIX

aafkhami — Mon, 23 Sep 2002 16:59:02 GMT

Thanks for your response but unfortunately it was not the case for me. I still cannot remove it, after wri m.

Re: Problem negating a command in PIX

ccaron — Fri, 27 Sep 2002 20:41:47 GMT

I have experienced the same issue and it was with version 5.3(1) software.

Here was my line, albeit not an IP route, but still a bogus line I could not get rid of:

outbound 10 except 192.168.0.100 0.0.0.252 0 tcp

I upgraded the software to 6.2(2) and the line "magically" disappeared all on it's own, almost like the software knew to get rid of it.

Hope this helps.

-Chris