Object_gorup _doesn't take mask

[rgk013013]

Hi all

In cisco ASA i have created objects

SO_asa(config)#name 10.2.1.0 SO_network

SO_asa(config)#object-group network SO_OB

SO_asa(config-netwrok)#network-object SO_network 255.255.252.0

network: IP address/mask <SO_network/255.255.252.0> doesn't pair

I want to give 10.2.1.0/22 netwrok in object group how can i give

only i am able to give 255.255.255.0

[saxenanitesh8522]

Hi you have to give it this way

SO_asa(config)#name 10.2.1.0 SO_network

SO_asa(config)#object-group network SO_OB

SO_asa(config-netwrok)#network-object 10.2.1.0 255.255.252.0

[rgk013013]

Hi Tried this way It not worked either

[arikawahyono]

Hi..

Is that really use subne /22 or /24?

Arik

[rgk013013]

Hi ,

Yes we use /22 .

[arikawahyono]

i think this is subnet problem,

10.2.1.1/22

network address 10.2.0.0

broadcast address 10.2.3.255

maybe u can try this:

SO_asa(config)#name 10.2.1.1 SO_network

SO_asa(config)#object-group network SO_OB

SO_asa(config-netwrok)#network-object 10.2.1.1 255.255.252.0

or

SO_asa(config-netwrok)#network-object SO_network 255.255.252.0

i hope this is solve your problem...

Arik

[rgk013013]

Nope .it is not worked either

[rgk013013]

Hi Arika

You were right in /22 10.2.1.0 to 10.2.4.255 it never fall in same subnet

So  i have given 10.2.1.0/24 and 10.2.2.0/23 and 10.2.4.0/24

[arikawahyono]

Hi Jose,

Good Work..