Hi Mahesh,
The configuration "name" gives you the chance to refer to an IP address / Network address in the configuration with a name rather than the IP address.
If you change the "name" configurations then this wont remove anything essential in the current configurations. For example if you have an "object-group network" which contains "network-object host " currently and you remove the "name" command corresponding to the then the "network-object host" line will stay there with the IP address instead of the name.
Heres an example from my home firewall
I create an "object-group"
object-group network NAMES
network-object host 1.1.1.1
network-object host 2.2.2.2
network-object host 3.3.3.3
I configure "name" configurations
name 1.1.1.1 NUMBER-ONE
name 2.2.2.2 NUMBER-TWO
name 3.3.3.3 NUMBER-THREE
I view the "object-group" configuration
ASA(config)# sh run object-group id NAMES
object-group network NAMES
network-object host NUMBER-ONE
network-object host NUMBER-TWO
network-object host NUMBER-THREE
I remove ALL the name configurations (you SHOULD NOT probably use this command as it removes all the "name" configurations)
clear configure name
I view the "object-group" configuration again
ASA(config)# sh run object-group id NAMES
object-group network NAMES
network-object host 1.1.1.1
network-object host 2.2.2.2
network-object host 3.3.3.3
So as you can see, only the presentation of the "object-group" configurations changes. Not the actual content which are the actual IP addresses specified in the "network-object" command.
It seems to me that you will have to remove the existing "name" configuration for an IP address before you can apply a new name. It seems that there is no command to rename it though I guess there really is no need for it as the "name" configurations isnt a critical part of the configurations and doesnt really affect anything (to my understanding).
While I can see "name" configurations uses I dont personally use it at all. Its one of the first things I disable on the firewall
- Jouni
