I just went through and restructured my IP pool on vlan 1. My issue is that my Windows VPN Server is now instead of I statically assigned the Windows server outside of my IP pool so that it would remain static. How do I accomplish this IP address change in the ASA? I've tried changing the object IP in the ASDM, no avail... I am unsure what is the next step to take. Here is my show run:

object-group network PPTP-server
object-group network hst-  <-- THIS IS WHAT I NEED TO CHANGE
 description VPN-Server
object-group network DM_INLINE_NETWORK_1
 network-object 10.xx.xx.0
 network-object 10.xx.xx.0
access-list outside_access_in extended permit tcp any interface outside eq pptp 
access-list outside_access_in extended permit icmp any any 

1 Answer 1


That's actually just the name/identifier for that object. The object in question actually has no host address associated with it.

If you want to add to that existing object, then type:

config t
object-group network hst-

if you want to rename the object and add the host to it, do:

config t
no object-group network hst- ! This deletes the object
object-group network [desired name]

A word of warning would be to make sure that object isn't being referred to anywhere else in the config. If it is, make sure to replace all instances with your new object if necessary.

  • 1
    ASA won't let you remove object-groups that are referenced by other parts of the configuration. OP will need to take the opposite approach to rename it; create the new object-group first, replace the old with the new wherever the old appears in the config, and then remove the old one. Oct 10, 2013 at 16:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.