Very Basic and Urgent Question.

[usmanghani255]

QUESTION:  

How to add following on ASA Firewall.

10.127.4.111 – SAPWFT tree Primary

10.127.4.112 – SAPEXT tree Primary

10.127.4.114 – SAPWFT tree Secondary

10.127.4.115 – SAPEXT tree Secondary

What I DID:

name 10.127.4.111 SAPWFT

name 10.127.4.112 SAPEXT

name 10.127.4.114 SAPWFT

name 10.127.4.115 SAPEXT

object-group network tESTING-lAB

network-object host SAPWFT

network-object host SAPEXT

network-object host SAPWFT

network-object host SAPEX

What eroor i am faced After adding in ASA Firewall.

R1(config)# name 10.137.4.111 SAPWFT

R1(config)# name 10.137.4.112 SAPEXT

R1(config)# name 10.137.4.114 SAPWFT

ERROR: 'SAPWFT' is already mapped to 10.137.4.111!

R1(config)# name 10.137.4.115 SAPEXT

ERROR: 'SAPEXT' is already mapped to 10.137.4.112!

Please tell me how i should add above IP Addresses with same name in Object Group. What are the different ways to add . Thanks

[Jouni Forss]

Hi,

If you plan on using the "name" configuration then naturally you CANT give the same name to two differnet IP addresses.

You could consider something like this?

name 10.127.4.111 SAPWFT-PRI

name 10.127.4.112 SAPEXT-PRI

name 10.127.4.114 SAPWFT-SEC

name 10.127.4.115 SAPEXT-SEC

-  Jouni