Adding addresses to an existing Tunnel Cisco ASA

I working on a Cisco 5500 ASA via ADSM  I have a tunnel set up with a network subnet and mask.  I need to add some address to this. I think if I go into the Edit Network Object Group I can do this.  However I have 3 address that are not in sequences and another 5 addresses that are in sequence.
so for example I have 11.12.13.41, 11.12.13.166 and 11.12.13.192 on the same subnet, is there a way to add all three in under the same name  and subnet mask?
Then I have an additional 5 IP's with 12.13.14.130, 131.132.133.134 same subnet and I would like to do the same thing.
Or do I need to add these one at a time?
WellingtonISAsked:
Who is Participating?
 
Jan SpringerConnect With a Mentor Commented:
To begin with, your access-list that's applied to your crypto map needs to be an exact inverse match of the other end.

For security, only allow those hosts to inter-communicate.  You only aggregate when any traffic between hosts in the subnet is interesting and should go across the tunnel.

The whole point of the object group  is that you have a single place to put hosts or subnets so it's not a big to deal to add a host at a time.
0
 
WellingtonISAuthor Commented:
So I need to add these one at a time? correct?
0
 
Jan SpringerCommented:
you can add them both but to both ends at roughly the same time.  otherwise, you'll have a mis-match in your policy and the tunnel will drop.
0
 
WellingtonISAuthor Commented:
Thanks!  That's what I did.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.