Asa names

[Josh Sprang]

Normally I do not use the Asa names function. I have no names enabled on the cli. The customer added a name to an ip in what I saw the correct way to do it under network objects in asdm. When they did this it added the name (text) (ipadd) to the cli and then deleted all acls where this ip address was in. Does anyone know why it deleted the acls?

Sent from Cisco Technical Support iPhone App

[Jennifer Halim]

Does it delete the ACL or it change the IP Address to be name?

Can you show us example.

Also what version of ASA are you running?

[Gautam Bhagwandas]

It didn't happen for me. Its just that when names are enabled, the name replaces the ip address.

Here's an example from my lab config:

HTTS-R1-ASA5510-01(config)# show ver

Cisco Adaptive Security Appliance Software Version 8.2(3)

..........

Case 1 : IP Address shown in acl when no names is enabled

**********************************************************************

HTTS-R1-ASA5510-01(config)# show access-list testacl

access-list testacl; 1 elements; name hash: 0x43e8b45d

access-list testacl line 1 extended permit ip host 1.1.1.1 any (hitcnt=0) 0xf7b550f6

HTTS-R1-ASA5510-01(config)# show run names

no names

HTTS-R1-ASA5510-01(config)# show run name

name 1.1.1.1 testhost

Case 2 : Name shown in ACL instead of IP Address when names is enabled

*****************************************************************************************

HTTS-R1-ASA5510-01(config)# names

HTTS-R1-ASA5510-01(config)# show access-list testacl

access-list testacl; 1 elements; name hash: 0x43e8b45d

access-list testacl line 1 extended permit ip host testhost any (hitcnt=0) 0xf7b550f6

[Marvin Rhoads]

That is behaving as designed.

The main purpose of names is to make things that use the named object more human-readable.

ASA 8.3+ uses network objects much the same way.