03-05-2012 09:19 AM - edited 03-11-2019 03:38 PM
Hi all
In cisco ASA i have created objects
SO_asa(config)#name 10.2.1.0 SO_network
SO_asa(config)#object-group network SO_OB
SO_asa(config-netwrok)#network-object SO_network 255.255.252.0
network: IP address/mask <SO_network/255.255.252.0> doesn't pair
I want to give 10.2.1.0/22 netwrok in object group how can i give
only i am able to give 255.255.255.0
03-05-2012 10:52 AM
Hi you have to give it this way
SO_asa(config)#name 10.2.1.0 SO_network
SO_asa(config)#object-group network SO_OB
SO_asa(config-netwrok)#network-object 10.2.1.0 255.255.252.0
03-05-2012 12:27 PM
Hi Tried this way It not worked either
03-05-2012 10:45 PM
Hi..
Is that really use subne /22 or /24?
Arik
03-06-2012 01:12 AM
Hi ,
Yes we use /22 .
03-06-2012 05:07 AM
i think this is subnet problem,
10.2.1.1/22
network address 10.2.0.0
broadcast address 10.2.3.255
maybe u can try this:
SO_asa(config)#name 10.2.1.1 SO_network
SO_asa(config)#object-group network SO_OB
SO_asa(config-netwrok)#network-object 10.2.1.1 255.255.252.0
or
SO_asa(config-netwrok)#network-object SO_network 255.255.252.0
i hope this is solve your problem...
Arik
03-06-2012 06:26 AM
Nope .it is not worked either
03-06-2012 08:54 AM
Hi Arika
You were right in /22 10.2.1.0 to 10.2.4.255 it never fall in same subnet
So i have given 10.2.1.0/24 and 10.2.2.0/23 and 10.2.4.0/24
03-06-2012 05:22 PM
Hi Jose,
Good Work..
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide