topic Re: Multiple ranges in a group in Network Security

Multiple ranges in a group

Danny Mainprize — Fri, 21 Feb 2020 16:48:23 GMT

I am trying to open up all the ip ranges that Cisco says it needs for webex to talk to my sparkboards. Is there an easy way to create a network object group that has multiple ranges in it? I am running ASA 9.8.2 if that makes a difference.

So for example (that does not work):

object-group network Webex

network-object range 64.68.96.0 64.68.127.255

network-object range 66.114.160.0 66.114.175.255

etc....

Then in my ACL I can just refer to the group name when opening ports. I'm sure I'm missing something easy, but it has been a long couple of weeks.

Thank you for any and all ideas.

Re: Multiple ranges in a group

balaji.bandi — Tue, 12 Feb 2019 23:20:40 GMT

How about like this :

object network webex_1

subnet 64.68.96.0 255.255.224.0

object network webex_2

subnet 66.114.160.0 255.255.224.0

object-group network Webex_Group

network-object object webex_1

network-object object webex_2

here is the big list you need to add for Webex

https://collaborationhelp.cisco.com/article/en-us/WBX264

Re: Multiple ranges in a group

Danny Mainprize — Tue, 12 Feb 2019 23:24:39 GMT

That very long list is what I was trying to avoid creating a ton of objects for. That is what I was going to do, but I was hoping there would be a better solution.

Re: Multiple ranges in a group

balaji.bandi — Tue, 12 Feb 2019 23:29:31 GMT

i know what you looking for to summarise. But unfortunatly you can not do that. they are different network ranges.