I have a (modified) configuration looking like this: screenshot of show output

When I try to commit, however, I get an error message: "Configuration error: "OUR-SERVERS" is not a valid IP range. I really want to have individual (/32) addresses in the group that the rule references. How can I do that?


From what I can tell, you just have one extra item in rule 1 (address OUR-SERVERS). This should fix it:

delete firewall name outside-in rule 1 source address OUR-SERVERS
  • 1
    So, you are saying only the "group { }" entry belongs there. So, all I need for the rule source is: set firewall name outside-in rule 1 source group address-group OUR-SERVERS Thanks. – Kevin Buchs Oct 23 '18 at 15:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.