Thanks Rene,
I got that but a doubt strike me - lets start with the below configuration:
network object TEST1
subnet 10.0.0.42.0 255.255.255.0
object-group network dmz
ASA-FW01(config-network-object-group)?
description Specify description text
group-object Configure an object group as an object
help Help for network object-group configuration commands
network-object Configure a network object
no Remove an object or description from object-group
ASA-FW01(config-network-object-group) network-object ?
network-object-group mode commands/options:
Hostname or A.B.C.D Enter an IPv4 network address
X:X:X:X::X/<0-128> Enter an IPv6 prefix
host Enter this keyword to specify a single host object
object Enter this keyword to specify a network object
FW01(config-network-object-group)# network-object 10.0.32.0 255.255.255.0
FW01(config-network-object-group)# network-object object TEST1
So my question is when I can populate the group with this command – network-object 10.0.32.0 255.255.255.0 – why should I create a network-object TEST1 and then place this object-network under the group as FW01(config-network-object-group)
network-object object TEST1