Using the RANGE command ASA 5506 in Packet Tracer

Security ASA
1

Hello, I am following the dynamic lab on Cisco ASA 5506 Ver. 8.3 and later but keep getting an error using cisco packet tracer. I am following the steps in the course but keep getting a marker under range command, invalid input detected at range.
example: ciscoasa (config-network-object)#range 192.168.2.100 192.168.2.200, why do I get error message? please help…

2

Hi Hanson,

This is a limitation of packet tracer. It’s a simulator, not an emulator so it doesn’t support 100% of the commands.

Here’s what packet tracer can do with the network object:

ciscoasa(config)#object network TEST
ciscoasa(config-network-object)#?
  description  Specify description text
  host         Enter this keyword to specify a single host object
  nat          Enable NAT on a singleton object
  no           Remove an object or description from object
  subnet       Enter this keyword to specify a subnet

And this is what a real 5506 can do:

ciscoasa(config)# object network TEST
ciscoasa(config-network-object)# ?

  attribute    Enter this keyword to specify an attribute
  description  Specify description text
  fqdn         Enter this keyword to specify an FQDN
  help         Help for network object configuration commands
  host         Enter this keyword to specify a single host object
  nat          Enable NAT on a singleton object
  no           Remove an object or description from object
  range        Enter this keyword to specify a range
  subnet       Enter this keyword to specify a subnet

Packet tracer is nice for CCNA but once you want to try anything else, it’s usually better to switch to real hardware or an emulator.

Rene

3

Thanks, I am getting the same issue with Cisco Virl, is virl and packet tracer the same? I spent 199 to solve this problem, is there anything wrong that I am doing on Virl?

4

Hello Hanson

You shouldn’t have the same problem with VIRL. Packet tracer is a simulator, so it will omit some functions like Rene said. VIRL however is an emulator, so it does support all of the features and commands of the real thing. I went into VIRL and was able to see the “range” keyword. This is my real ouptut from my VIRL session:

ASA1(config)# object network TEST
ASA1(config-network-object)# ?

  attribute    Enter this keyword to specify an attribute
  description  Specify description text
  fqdn         Enter this keyword to specify an FQDN
  help         Help for network object configuration commands
  host         Enter this keyword to specify a single host object
  nat          Enable NAT on a singleton object
  no           Remove an object or description from object
  range        Enter this keyword to specify a range
  subnet       Enter this keyword to specify a subnet
ASA1(config-network-object)#

Could it be a version issue? My show version output shows the following:

Cisco Adaptive Security Appliance Software Version 9.9(2) 
Firepower Extensible Operating System Version 2.3(1.84)
Device Manager Version 7.9(2)

Which specific command is not appearing, is it the range keyword only or are there others? Let us know so that we can continue to help you in your troubleshooting process.

I hope this has been helpful!

Laz