hi,
i'm trying to configure a global ACL and reuse the same object group in a single ACL line.
i got a warning saying 'config is redundant' but when i checked, it was accepted.
my question is, can i ignore the warning and my ACL would still work? i don't want to create another object group referring to the same subnets, i.e. create an object 'CORPORATE-SUBNET-2'.
ciscoasa(config)# access-list GLOBAL_ACL extended permit object-group UDP_16384-32767 object-group CORPORATE-SUBNET object-group CORPORATE-SUBNET
WARNING: Same object-group is used more than once in one config line. This config is redundant. Please use separate object-groups
ciscoasa(config)#
ciscoasa(config)# sh run access-list GLOBAL_ACL
access-list GLOBAL_ACL extended permit object-group UDP_16384-32767 object-group CORPORATE-SUBNET object-group CORPORATE-SUBNET
