Hi guys,
We have a weird problem on a Cisco ISR4351 when configuring a numbered access-list using object-groups for source and destination hosts.
We do not run into any problems when configuring the access-list, and the configuration appears in the running-config normally. We can also save the configuration normally and it appears in the startup config.
However, when reloading the router, and when the router is starting up and applying the startup config, we get "% Invalid input detected at '^' marker." under the object-group keyword of the access-list. Below the output during startup:
access-list 111 permit ip object-group SOURCE-GROUP object-group DEST-GROUP
^
% Invalid input detected at '^' marker.
After the router has completed starting up, we can re-add the sequence with the object-group normally, so the problem occurs when the router is starting up, not when trying to configure it from CLI.
Does anyone have any input for this problem?
