topic Multi context configuration on ASA in Network Security

Multi context configuration on ASA

mohammad_omran — Mon, 11 Mar 2019 22:21:16 GMT

Dears

I am trying to configure multi context on the 5520 ASA , how can i configure 1 outside and 1 inside for the 2 context or how to configure both outside from the same subnet and insides also from the same subnet , i did the below configuration but didn't work :S

admin-context admin
context admin
allocate-interface gi0/0 outside
allocate-interface gi0/1 inside
config-url disk0:/admin.cfg

interface gi0/0
!
!
interface gi0/1
!
!
interface gi0/2

interface gi0/2.12
vlan 212
!
interface gi0/2.13
vlan 213
!

interface gi0/3.14
vlan 214
!
interface gi0/3.15
vlan 215

context Context1

   allocate-interface gi0/0
   allocate-interface gi0/1
   allocate-interface gi0/2.12
   allocate-interface gi0/3.14
   config-url disk0:/Context1

context Context2

   allocate-interface gi0/0
   allocate-interface gi0/1
   allocate-interface gi0/2.13
   allocate-interface gi0/3.15

change context Context1
int gi0/1
ip address 10.10.10.10 255.255.255.0

change context Context2
int gi0/1
ip address 10.10.10.11 255.255.255.0

Multi context configuration on ASA

integreon — Mon, 30 Jan 2012 19:18:04 GMT

Friend, refer below document; this explains multiple context IP configuration.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808d2b63.shtml

Multi context configuration on ASA

Marvin Rhoads — Mon, 30 Jan 2012 19:46:32 GMT

Typically you would allocate the physical interfaces to the admin context and then subinterfaces in the various other contexts.

Also, typically when you are using subinterfaces you do not assign an IP address to the parent interface as your downstream switch is expecting tagged traffic on the VLANs associated with the subinterfaces.

Have you had a look at this configuration guide?

Multi context configuration on ASA

mohammad_omran — Tue, 31 Jan 2012 07:24:54 GMT

Many thanks , yes i checked the mentioned configuration guide but didn't solve my problem , i can't assign 2 Vlans for out side (1 for context 1 and one for context 2 ) , i need to configure single inside and single outside for the system , then will allocate the sub interfaces as needed .

How can i achieve this??

Multi context configuration on ASA

mohammad_omran — Tue, 31 Jan 2012 07:25:36 GMT

Many thanks , i already checked it thanks for your help