actice/active switch to active/passive

[hamidreza.taghipur]

hi

i use 2 ASA in Active/Active MultiContext mode .
and i want add 2 another ASA to my network , and switch to active/passive
mode without multicontext
how do i convert or migrate every context configure file in system context (.cfg file for every context) to standalone ASA ?
or do we have any procedure for this issue ?

[Rob Ingram · Accepted solution]

@hamidreza.taghipur there is no automated procedure or tool to perform this task. You would have to manually copy the configuration and paste into the new ASA. Interfaces may be different on the new hardware, so you may need to amend. Also if you are intending to use a new ASA version some features may be depreciated, such as older crypto ciphers, so you check this before migrating.

[hamidreza.taghipur]

thanks for attention .
i dont have any problem with manual configuration in new ASA again , specialy for new interfaces and etc.. but i have a problem in copy my ACLs in cli mode
i have many ACLs , specialy object-groups
and whenever i copy and paste them in new ASA cli . i take many error
and i cant edit them one by one .
do you have any solution for solve it ?

[Rob Ingram]

@hamidreza.taghipur can you be more specific, what errors do you get when you paste the configuration? Provide the errors here for review so we can help.

[hamidreza.taghipur]

i think i find own mistake
i pasted my ACLS , before import object and object-groups . and i had some error for unknown object in acl
thanks alot

[MHM Cisco World]

https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/admin_swconfig.html

check this how copy config from ASA to new one or during migration or upgrade. 

do more
sytem : show running 

copy the output 
then paste it 

Thanks A Lot
MHM