Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Object_gorup _doesn't take mask

Hi all

In cisco ASA i have created objects

SO_asa(config)#name 10.2.1.0 SO_network

SO_asa(config)#object-group network SO_OB

SO_asa(config-netwrok)#network-object SO_network 255.255.252.0

network: IP address/mask <SO_network/255.255.252.0> doesn't pair

I want to give 10.2.1.0/22 netwrok in object group how can i give

only i am able to give 255.255.255.0

8 REPLIES
New Member

Object_gorup _doesn't take mask

Hi you have to give it this way

SO_asa(config)#name 10.2.1.0 SO_network

SO_asa(config)#object-group network SO_OB

SO_asa(config-netwrok)#network-object 10.2.1.0 255.255.252.0

New Member

Object_gorup _doesn't take mask

Hi Tried this way It not worked either

New Member

Object_gorup _doesn't take mask

Hi..

Is that really use subne /22 or /24?

Arik

New Member

Object_gorup _doesn't take mask

Hi ,

Yes we use /22 .

New Member

Object_gorup _doesn't take mask

i think this is subnet problem,

10.2.1.1/22

network address 10.2.0.0

broadcast address 10.2.3.255

maybe u can try this:

SO_asa(config)#name 10.2.1.1 SO_network

SO_asa(config)#object-group network SO_OB

SO_asa(config-netwrok)#network-object 10.2.1.1 255.255.252.0

or

SO_asa(config-netwrok)#network-object SO_network 255.255.252.0

i hope this is solve your problem...

Arik

New Member

Object_gorup _doesn't take mask

Nope .it is not worked either

New Member

Object_gorup _doesn't take mask

Hi Arika

You were right in /22 10.2.1.0 to 10.2.4.255 it never fall in same subnet

So  i have given 10.2.1.0/24 and 10.2.2.0/23 and 10.2.4.0/24

New Member

Object_gorup _doesn't take mask

Hi Jose,

Good Work..

733
Views
0
Helpful
8
Replies
CreatePlease to create content