cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
12558
Views
0
Helpful
2
Replies

ASA 5520: Adding network objects via CLI

dan
Level 1
Level 1

Hi (again),

I'm working with ASA 5520s. I am trying to figure out how to add network objects via CLI. I know I could easily do it using ASDM, but I like to learn the hardway first.

Question: How do I add the subnet mask for a network object when creating via CLI?

Here's how I'm creating the obejcts:

config t

object-group network telnet-users-group

description users allowed telnet access outbound

network-object host 172.16.25.50

network-object hosts 172.16.25.51

That sets up the hosts with IP addresses, but how do I add the subnet mask?

Thanks,

Dan

1 Accepted Solution

Accepted Solutions

varrao
Level 10
Level 10

Hi Dan,

You do not need to it for a single host, the firewall takes it to be 255.255.255.255, but if you are adding a network or subnet then you can, for it you can add:

object network test

  subnet 20.0.0.0 255.0.0.0

object network test1

  subnet 10.0.0.0 255.0.0.0

object-group network test-group

network-object object test

network-object object test1

Hope that helps.

Thanks,

Varun

Thanks,
Varun Rao

View solution in original post

2 Replies 2

varrao
Level 10
Level 10

Hi Dan,

You do not need to it for a single host, the firewall takes it to be 255.255.255.255, but if you are adding a network or subnet then you can, for it you can add:

object network test

  subnet 20.0.0.0 255.0.0.0

object network test1

  subnet 10.0.0.0 255.0.0.0

object-group network test-group

network-object object test

network-object object test1

Hope that helps.

Thanks,

Varun

Thanks,
Varun Rao

After looking at how the ASDM GUI created hosts I sort of figured that was the case.

Thanks.

Dan

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: