topic Multi-context to single-context ASA5555 in Network Security

Multi-context to single-context ASA5555

Stuart-ITGL — Wed, 11 Sep 2019 10:49:00 GMT

A customer of mine has an ASA5555 given to him in multi-context mode. There's only the one context being used as it is so seems pointless to have it set up like that.

Is it just a case of changing to single mode and then copy and pasting his config back in to get it up and running again or is it a bit more involved than that?

I've had a look here - https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/ha_contexts.html#63741 - but that seems to be converting to single mode after first being placed in multi-mode.

Re: Multi-context to single-context ASA5555

Sheraz.Salim — Wed, 11 Sep 2019 14:57:22 GMT

if you plan to change the context from single to multi-context or from multi-context to single context in both case the running config will be wipe. when you configure a command mode single/mode multi.

make sure you have change control in place for this work and prior to do this take a fresh copy of the firewall. remember when you running in multicontext you have to assign physical interface to each multi context.

in your case you have to make sure your confiuration of your interface are rightly nameif and with right ip address.

having said that, if customer firewall is working fine with no issue than why so curious to change in to single mode?

Re: Multi-context to single-context ASA5555

Sheraz.Salim — Wed, 11 Sep 2019 15:19:57 GMT

in your case you have to make sure your confiuration of your interface are rightly nameif and with right ip address.

having said that, if customer firewall is working fine with no issue than why need to change.