ASA Acces List Error | ERROR: % Incomplete command

Hassan Kashaf — Fri, 21 Feb 2020 13:55:32 GMT

Hello Everyone,

I am trying to enter the following rule but i am getting an Error, I have similar rule already inside the firewall, so I don't really get what is wrong and how to go about troubleshooting it. Can anyone help?

access-list acl_inside extended permit object-group 16-09-08F 132.235.192.0 255.255.192.0 eq https log

(config-network)# access-list acl_inside extended permit object-group$

access-list acl_inside extended permit object-group 16-09-08F 132.235.192.0 255.
255.192.0 eq https log
^
ERROR: % Invalid Hostname

SAME THING WITHOUT LOG

(config-network)# access-list acl_inside extended permit object-group$

access-list acl_inside extended permit object-group 16-09-08F 132.235.192.0 255.
255.192.0 eq https
ERROR: % Incomplete command

SAME STUPID ERROR,

THE RULE THAT IS SIMILAR;

# SH ACCess-list | I 132.235.192.0
access-list acl_inside line 2767 extended permit tcp object-group 16-06-29X-2 132.235.192.0 255.255.192.0 eq https

???????

I am not sure this warrants a case from cisco?

FW100ABCx(config)# object-group network 16-09-08F
FW100ABCx(config-network)# network-object host 172.191.235.136
Adding obj (network-object host 172.191.235.136) to grp (16-09-08F) failed; object already exists
FW100ABCx(config-network)# network-object host 172.191.235.135
Adding obj (network-object host 172.191.235.135) to grp (16-09-08F) failed; object already exists
FW100ABCx(config-network)# network-object host 172.191.235.134
Adding obj (network-object host 172.191.235.134) to grp (16-09-08F) failed; object already exists
FW100ABCx(config-network)# network-object host 172.52.134.76
Adding obj (network-object host 172.52.134.76) to grp (16-09-08F) failed; object already exists
FW100ABCx(config-network)#
FW100ABCx(config-network)# access-list acl_inside extended permit object-group$

access-list acl_inside extended permit object-group 16-09-08F 132.235.192.0 255.255.192.0 eq 443
ERROR: % Incomplete command

Hello Hassan, You are missing

Dinesh Moudgil — Tue, 27 Sep 2016 03:45:08 GMT

Hello Hassan,

You are missing protocol keyword (tcp/udp)
Try this:

object-group network 16-09-08F
network-object host 172.191.235.136

access-list acl_inside extended permit tcp object-group 16-09-08F 132.235.192.0 255.255.192.0

Regards
Dinesh Moudgil

P.S. Please rate helpful posts.

Thanks Dinesh:)

Hassan Kashaf — Tue, 27 Sep 2016 08:09:42 GMT

Thanks Dinesh:)

topic Hello Hassan, You are missing in Network Security

ASA Acces List Error | ERROR: % Incomplete command

Hello Hassan, You are missing

Thanks Dinesh:)