ASA context mode, add, remove, change DMZ

[wilson_1234_2]

Software Version 9.1(7)4 <context>

ASA5585-SSP-10

We have an ASA in context mode and I have not worked with this setup before. I am just wondering what changes are made in system context and what changes are made in each individual context.

For example, I know I can make changes to add/remove object and object groups, NAT, ACLs and the general config in each context, but when I tried to add or remove an interface, I was told it had to be within the system.

So, if I want to change the IP Address of a DMZ interface, does it need to be in the system, or the localized context?

Is there a guide showing what has to be done in system mode?

[ankojha]

Hi Wilson,

I found this guide which can help you with configuration allowed in various contexts :

http://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/ha_contexts.html#38788

Rate if it helps.

Thanks,

Ankita