- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-26-2012 01:01 PM - edited 03-11-2019 05:41 PM
Hi..
Anybody knows how to configure Cascading Security Contexts in Cisco ASA? How works?
Any step by step configure?
Thanks...
Solved! Go to Solution.
- Labels:
-
NGFW Firewalls
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-26-2012 01:09 PM
Hi,
Please refer to this information:
http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/contexts.html#wp1146927
Luis Silva
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-26-2012 01:09 PM
Hi,
Please refer to this information:
http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/contexts.html#wp1146927
Luis Silva
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-26-2013 10:54 AM
Hello Luis,
That document is rather sparse when it comes to detailed information on Cascading contexts. Are there any documents that go into more details?
In particular I am looking for packet processing information. If you have multiple contexts that have their outside interfaces connected to a "Gateway Context" is Inter-Context traffic processed entirely by the ASASM and does not hit the switch?
Im comparing this to a standard configuration in which multiple contexts would have their Outside interfaces connected to the switches MSFC. In that configuration I would think that the switch would need to process the packets as they egress the outside interface of one context and ingress the outside interface of another.
I would see how in either scenario the switch would process the Layer-2 switching. In the 1st example I would not expect the switch to have to process the Layer-3 traffic as its routing between 3 different contexts on the same ASASM and not having to route down to the MSFC.
Thank you.
Edit:
Just thought of something else I had on my mind. Would it be possible to run EIGRP between cascading contexts when running ASA Version 9.0(1)
