Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm wanting to block a range of ip addresses on my Cisco ASA 5520 (8.2) using ASDM 6.4.

In the help files/cisco documentation, it says, just create a network object with a "range" type, and use that in a blocking access rule...

When I'm accessing the ASA (8.2) with ASDM 6.4, I go to config>firewall>object>network objects & groups, then click "add" to add the IP range as a "network object", I get the following 4 fields to fill out:

Name: IP address: Netmask: Description:

That's all... In the context-sensitive help files, it says that there should be a Type drop-down to select, with "range" being one of the options, but there is no "Type" drop-down list...

If I try to create a "network object group" instead of just "network object", then I get a "Type" drop down list, but it only contains two options: network & host (No "Range" option here either)

Can someone help me figure out how to block a range of IP's, using the current 8.2 version on the ASA?

Thanks for any pointers or tips!

share|improve this question

ASA didn't begin supporting the object command (and thus address ranges) until version 8.3. ASDM 6.4 supports ASA versions newer than 8.2, and the online help (and possibly even the GUI) probably reflect features available in versions newer than yours. Assuming it works at all, I would guess the ASDM implements this feature using an object-group instead, which doesn't support IP ranges (just hosts and subnets).


share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.