Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Delete ASDM Location Objects

Hello,

I would like to remove an object configured in ASDM by "asdm location 1.1.1.1 255.255.255.255 inside" command. Sadly, this object "1.1.1.1" stays in several NAT rules and access rules in the configuration so I can't remove this object because it is used in other sites of the configuration.

Please do you know if is there some way to remove this object globally ?

Thanks in advance

Andres

2 REPLIES
Super Bronze

Delete ASDM Location Objects

Hi,

There is not much information provided about this command in the Command Reference for ASA.

The document does state that one should NOT add or remove this command.

Here is link to the Command Reference section of this command

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/a2.html#wp1664066

Here is a link to the Command Reference regarding a command that could be used to clear "asdm" related configurations.

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/c2.html#wp2390368

As the document indicates, you should be carefull when issuing the commands as they can affect your ability to use ASDM or affect current sessions. It has an option to only clear the "location" related configurations. I am not sure what their effect is.

I am not sure what generates these commands as I don't see them in my own ASA. Then again I very rarely use ASDM to begin with. I do remember to customer managed ASAs (older ones) have plenty of these commands generated.

- Jouni

New Member

Delete ASDM Location Objects

Hi Jouni,

thanks for your answer. I have tested "clear configure asdm location" in a testing appliance. When the object "1.1.1.1" stays in some access rule, "clear configure asdm location" command does nothing, all the config remains the same. But if that object "1.1.1.1" is not used anywhere, the "clear configure asdm location" removes ALL the objects configured by "asdm location x.x.x.x y.y.y.y interface" command, so finally it wouldn't be a good practice.

So, by now, clear the object in all nat/access rules manually is the only way that I see

Thanks again

Andres

963
Views
0
Helpful
2
Replies
CreatePlease to create content