topic Re: Cisco ASA Multi-Context mode running 2 separate BGP AS processes in Network Security

Cisco ASA Multi-Context mode running 2 separate BGP AS processes - Is this supported!!!

apatergin — Tue, 12 Mar 2019 09:00:27 GMT

I have a pair of Cisco 5525x Firewalls running code 9.7.1 in multi-context mode. I have 2 contexts that require to run independent BGP instances. Is this a supported configuration? If yes, can you shed some light on the configuration side. Based on what I know the BGP process has to be enabled in the system context before it can be applied to the normal context. As far as I can see I can only enable one BGP AS in the system context mode.

Re: Cisco ASA Multi-Context mode running 2 separate BGP AS processes - Is this supported!!!

aaron.vieyra — Tue, 31 Jul 2018 20:54:02 GMT

Hello,

Please be aware that setting two BGP instances on the ASA is not possible, see the limitations on the following link:

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118050-config-bgp-00.html

If we are talking about multiple context, the BGP instance need to be configured first on the system context, that been said, the ASA will display an error whenever a second BGP instance is tried to set up.

Regards,

Aaron.

Re: Cisco ASA Multi-Context mode running 2 separate BGP AS processes

johnlloyd_13 — Fri, 19 Jul 2024 09:13:30 GMT

hi,

is the single BGP instance still a restriction?

i'm using FPR 3100 in ASA multiple mode.

it currently has a BGP config under the system and on a context and would like to add another BGP instance.

can someone advise and point me to a "new" cisco link using FPR appliance with ASA OS?

Re: Cisco ASA Multi-Context mode running 2 separate BGP AS processes

ccieexpert — Sun, 21 Jul 2024 03:42:58 GMT

multicontext has not changed AFAIK.. their is no new development as they are moving to multi-instance capability. One thing you can look into using multiple FTD instance .. each one will be a separate FTD image and instance and you have to divide up the cores between the instances... essentially like running multiple firewalls..

Re: Cisco ASA Multi-Context mode running 2 separate BGP AS processes

johnlloyd_13 — Sun, 30 Mar 2025 07:10:34 GMT

hi,

the cisco doc wasn't explicit regarding this topic.

if the ASA 'system' context already has an existing BGP AS instance, say 65000 in context-a, i can re-use the same AS 65000 in context-b?

will this interrupt the BGP instance/operation in context-a?

is the BGP instance 65000 in context-b independent from the same BGP 65000 in context-a?