topic Re: FPR 1120 ASA Security Context in Network Security

FPR 1120 ASA Security Context

johnlloyd_13 — Mon, 29 May 2023 05:09:23 GMT

hi,

i'm trying to configure a FPR 1120 ASA multiple mode for 10 security context.

i tried to configure feature context 10 but it's not letting me do so. i saw total is only 3 using syntax help mode.

per FPR 1000 series data sheet, the 1120 context can go up to 5.

can someone advise if there's anything i missed or anything to add/configure in system context?

https://www.cisco.com/c/en/us/products/collateral/security/firepower-1000-series/datasheet-c78-742469.html

fw01/pri/act(config)# license smart
INFO: License(s) corresponding to an entitlement will be activated only after an entitlement request has been authorized.
fw01/pri/act(config-smart-lic)# feature context ?

smart-lic-mode mode commands/options:
<1-3> Specify the total number of security contexts for the device

Re: FPR 1120 ASA Security Context

Flavio Miranda — Mon, 29 May 2023 05:22:38 GMT

https://www.cisco.com/c/en/us/td/docs/security/asa/asa913/configuration/general/asa-913-general-config/ha-contexts.html#ID-2171-000000f4

Firepower 1100

Base License: 2 contexts.

Optional License, Maximums:

Firepower 1120: 5

Firepower 1140: 5

Firepower 1150: 25

Re: FPR 1120 ASA Security Context

johnlloyd_13 — Tue, 30 May 2023 01:44:40 GMT

hi,

i already saw the datasheet and the context limit is 5.

my question is, why the syntax help showed only up to 3?

i can't even apply "feature context 5"

Re: FPR 1120 ASA Security Context

Marvin Rhoads — Tue, 30 May 2023 03:02:50 GMT

If I recall correctly, once you have slected and aplied multiple mode you already have two context created by default (system context and admin context). The feature command allows you to add the additional 3.

Re: FPR 1120 ASA Security Context

johnlloyd_13 — Tue, 30 May 2023 03:10:52 GMT

hi marvin,

this seems unfair.

i thought the "system" and "admin" contexts are considered "free" and not counted in the license?

did this change with new ASA code/FPR platform?

Re: FPR 1120 ASA Security Context

MHM Cisco World — Tue, 30 May 2023 11:45:14 GMT

sorry you have license of 5 ?

Re: FPR 1120 ASA Security Context

Flavio Miranda — Tue, 30 May 2023 11:56:52 GMT

What I was tried to show you is that with Base License you can get 2. For 5, you need Optional License. As per your description, you might have Base license.

Re: FPR 1120 ASA Security Context

MHM Cisco World — Wed, 31 May 2023 01:06:47 GMT

@Marvin Rhoads right check below
(Optional) For the Context license, enter the number of contexts.

You can use 2 contexts without a license. The maximum number of contexts depends on your model:

Firepower 1120—5 contexts
Firepower 1140—10 contexts
Firepower 1150—25 contexts

For example, to use the maximum of 5 contexts on the Firepower 1120, enter 3 for the number of contexts; this value is added to the default of 2.

really unfair

Re: FPR 1120 ASA Security Context

kommsec — Fri, 03 Jan 2025 14:15:28 GMT

Hi,

Before in the ASA-5516x family in multiple context mode 2 context were included, which mean if you have a HA-cluster you had 2 + 2 + 1 (admin/system-context). Do you still have the same possibility with 1120/1150 (Base License: 2 contexts) and how achieve this configuration in HA-cluster with the new Smart Licensing model,

Regards