ASA Firewall error while adding SCTP in ACCESS LIST

[HARIS_HUSSAIN]

In ASA When i Try to add the SCTP protocol  the ASDM give below error.Can any one help here to understand SCTP Options in ASA & why does it now work ?

 

[Sheraz.Salim]

you need to define a host/object network/object-group

for example.

access-list inside_in extended permit sctp any host 192.168.x.x

yo can not have access-list inside_in extended permit sctp any any

[HARIS_HUSSAIN]

I tried with SCTP command but ASA is unable to identify SCTP Protocol.


ciscoasa(config)# access-l TEST-1 ext permit sctp any host 192.168.10.1
^
ERROR: % Invalid input detected at '^' marker.
ciscoasa(config)# access-l TEST-1 ext permit s?

configure mode commands/options:
snp
ciscoasa(config)# access-l TEST-1 ext permit sctp ?
ERROR: % Unrecognized command
ciscoasa(config)# access-l TEST-1 ext permit sctp

[Sheraz.Salim]

what ASA version you running on ?

i test this command on 9.8 and it working.

[Rob Ingram]

It looks like SCTP protocol support was add in ASA v9.5, release notes.

As has Radio_City, I've confirmed it works on my image (9.9)

HTH

[HARIS_HUSSAIN]

Mine i s Software Version 9.1

[Rob Ingram]

What hardware are you running? If it's too old (5505, 5510, 5520 etc) it may not support the newer firmware versions.

[Sheraz.Salim]

just to add what RJI asid

check this matrix of software in regards to firewall hardware

https://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html#id_59423