Object group help PIX 515E

[SmashX1]

I have the following in my config:

name 63.x.x.x MGADMIN

object-group network PCAnywhere
network-object host MGADMIN

object-group service PCAnywhere-ports tcp-udp
port-object eq pcanywhere-data
port-object eq 5632
port-object eq 5633
port-object eq 5634
port-object eq 1645
port-object eq 1646

I am having trouble with the access-list statement. I have tried several variations, but here is the most recent:

access-list acl-out permit object-group PCAnywhere-ports any object-group PCAnywhere

This is producing the following output from the PIX 515E:

ERROR: specified object group <PCAnywhere-ports> has wrong type; expecting proto
col type

I am not sure what to do.

 

[SmashX1]

I just figured it out.


access-list acl-out permit tcp any object-group PCAnywhere object-group PCAnywhere-ports

Reading Cisco syntax as a newbie is painful.