Policy-map type inspect ipv6- match header destination-header

[f-cagica]

Hello experts,

while configuring some ASA Firewalls for IPv6 dual-stack i've noticed that 9.1(7) doesn't have anymore the option "match header destination-option" (under Policy-map type inspect ipv6) available. Not sure why... also not able to find any bug or mention to it in the release notes... is anyone aware of it?

Thanks,

Fernando

[Thomas Bille Joergensen · Accepted solution]

Hello Fernando,

Please see the following note taken from "Release Notes for the Cisco ASA Series, 9.1(x)". This could be a solution.

Note: Version 9.1(7) was removed from Cisco.com due to build issues; please upgrade to Version 9.1(7.4) or later.

Regards,

Thomas

[mbudhira]

Hi Thomas,

We are facing the same issue on 9.1(7.4), Any suggestions on this?

Thanks in advance

Regards

Mahak

[Thomas Bille Joergensen]

Hello Mahak,

Well, I would probably check any migration or error log files on the flash drive. If nothing relevant here, you could backup your configuration, do a 'wr erase', download the image file again from the website and put it back on the ASA for a clean install. Then you could check if the command exists.

It is also adviseable to run the verify command on the file and compare hash value to the one on the website.

Regards,

Thomas

[f-cagica]

Hi Thomas,

thanks.

Fernando

[Thomas Bille Joergensen]

Good to hear, you're welcome :)

Regards,

Thomas