cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


149
Views
0
Helpful
2
Replies
Beginner

Multi-context to single-context ASA5555

A customer of mine has an ASA5555 given to him in multi-context mode.  There's only the one context being used as it is so seems pointless to have it set up like that.

 

Is it just a case of changing to single mode and then copy and pasting his config back in to get it up and running again or is it a bit more involved than that?

 

I've had a look here - https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/ha_contexts.html#63741 - but that seems to be converting to single mode after first being placed in multi-mode.  

Everyone's tags (3)
2 REPLIES 2
Highlighted
Rising star

Re: Multi-context to single-context ASA5555

if you plan to change the context from single to multi-context or from multi-context to single context in both case the running config will be wipe. when you configure a command mode single/mode multi.

make sure you have change control in place for this work and prior to do this take a fresh copy of the firewall. remember when you running in multicontext you have to assign physical interface to each multi context. 

 

in your case you have to make sure your confiuration of your interface are rightly nameif and with right ip address. 

 

having said that, if customer firewall is working fine with no issue than why so curious to change in to single mode? 

please do not forget to rate.
Rising star

Re: Multi-context to single-context ASA5555

if you plan to change the context from single to multi-context or from multi-context to single context in both case the running config will be wipe. when you configure a command mode single/mode multi.

make sure you have change control in place for this work and prior to do this take a fresh copy of the firewall. remember when you running in multicontext you have to assign physical interface to each multi context. 

 

in your case you have to make sure your confiuration of your interface are rightly nameif and with right ip address. 

 

having said that, if customer firewall is working fine with no issue than why need to change. 

please do not forget to rate.