Cannot Modify a Service Object-Group

[ronbuchalski]

We have an ASA 5540 running ASA v 8.4(7).  I am attempting to edit an existing service object-group, to add a few additional ports.  However, when I attempt to do so, I get one of two problems.

If I type 'object-group service FOO' and enter it, I get:

An object-group with the same id but different type (service) exists

If I type 'object-group service FOO tcp and enter it, the ASA accepts the command, and the cursor drops to the next line, but I receive no prompt, and whatever I type in does not echo on the screen.  It's like the ASA goes into the Twilight Zone.

I can log into the ASA with another SSH session, so it's not like the ASA is locked up.

Any ideas about this one?

Thanks in advance,

-rb

[jumora]

Please run the next command:

show run object id FOO

Please send the output so I can understand what is going on.

[jumora]

And also:

show run object-g id FOO

[ronbuchalski]

I found what the problem was.  The primary and secondary ASAs were no longer in sync with the configuration, so it wouldn't let me change anything.  But it didn't warn me either.

I failed over to the secondary, and rebooted the primary, and they re-synced configurations.  Then I was able to change the object-group, as expected.

Thanks for your assistance.

-rb

[jumora · Accepted solution]

Thank you for the update!!!

[jumora · Accepted solution]

Please update the ticket as resolved or answered so we can close out followup.