cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


2392
Views
0
Helpful
1
Replies
Highlighted
Beginner

ASA 8.4 Object-Group, syntax query

Hi

I have:-

!

object-group network WEB_SITES

network-object object www.123.de

network-object object www.123.com

network-object object www.123.eu

network-object object www.123.fr

network-object object www.123.nl

network-object object www.123.be

!

sh run object-group service

object-group service 80443

service-object tcp destination eq www

service-object tcp destination eq https

!

!

I want to allow any source to access  destinaton "WEB_SITES" on the pots in "80443"

I tried,

access-list OUTSIDE extended permit tcp any object-group WEB_SITES object-group 80443

and got

"ERROR: specified object group <80443> has wrong type; expecting service type"

BUT if query the syntax, it asks for?

access-list OUTSIDE extended permit tcp any object-group WEB_SITES ?                

configure mode commands/options:

  eq            Port equal to operator

  gt            Port greater than operator

  inactive      Keyword for disabling an ACL element

  log           Keyword for enabling log option on this ACL element

  lt            Port less than operator

  neq           Port not equal to operator

  object-group  Optional service object-group for destination port

  range         Port range operator

  time-range    Keyword for attaching time-range option to this ACL element

  <cr>

access-list OUTSIDE extended permit tcp any object-group WEB_SITES  object-group ?

configure mode commands/options:

  WORD  Service object-group name for destination port

What am I doing wrong? Im sure you can allow destination to a group of ports!!

It's late and my head hurts

Im on:-

sh ver

Cisco Adaptive Security Appliance Software Version 8.4(2)

Device Manager Version 6.4(9)

Compiled on Wed 15-Jun-11 18:17 by builders

System image file is "disk0:/asa842-k8.bin"

Regards,

Everyone's tags (5)
1 ACCEPTED SOLUTION

Accepted Solutions

ASA 8.4 Object-Group, syntax query

Hello,

It should be today:

access-list OUTSIDE extended permit object-group 80443 any object-group WEB_SITES

Regards,

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
1 REPLY 1

ASA 8.4 Object-Group, syntax query

Hello,

It should be today:

access-list OUTSIDE extended permit object-group 80443 any object-group WEB_SITES

Regards,

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC