Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
My goal is to be able to edit firewall exceptions "on the fly" and without having to hack an ACL. I have created a service object-group that contains exceptions to the firewall, however when I apply this object-group to the firewall ACL, it opens up ...
Extended IP access list FIREWALL 5 permit object-group FIREWALL-EXCEPTIONS any any log (62 matches) 500 deny ip any any (3457 matches)Service object group FIREWALL-EXCEPTIONS tcp eq 61259 tcp eq 25222The object-group shows up in the FIREWALL ...
You're right Jon. The ACL should actually read "permit tcp any any object-group FIREWALL-EXCEPTIONS" but the device won't take the command when it's structured like that! It's really throwing me off!Maybe I've encountered a bug in the IOS?Here's the ...