BGP support on Cisco ASA 9.2.1

[Sumanta Ghosh]

Hi Experts

What is meant by the below? ASA Software Version 9.2.1.

• The BGP IPv4 address family is supported in both single mode and multi-mode.
• Multi-mode is equivalent to the Cisco IOS^® BGP VPNv4 (VPN Routing and Forwarding (VRF) address family). Per context router, BGP is similar to per VRF IPv4 address family in Cisco IOS.

[Spooster IT Services · Accepted solution]

Hi Sumanta,

In Multi-mode, you can partition a single ASA into multiple virtual devices, known as security contexts. Each context acts as an independent device, with its own security policy, interfaces, and administrators. Multiple contexts  similar to having multiple standalone devices. Cisco IOS BGP VPNv4 and Multi-mode is only similar that you can differentiate the routing between the customers/departments etc. 

[Sumanta Ghosh]

Hi Team

Thanks a lot. Can we expect the same on FP9300 running FTD latest image? Anything in roadmap, if not supported?

[Spooster IT Services]

In FP9300 running FTD latest image,  BGP is supported only in router mode but not support transparent firewall mode. Following is the link having information.

http://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/bgp_for_firepower_threat_defense.html

[Sumanta Ghosh]

Hi Experts

Thanks. Do we have mutiple contexts in FTD as well, so as to run BGP in each VRF? Similar to ASA?