Cisco ASA Multi-Context mode running 2 separate BGP AS processes - Is this supported!!!

[apatergin]

I have a pair of Cisco 5525x Firewalls running code 9.7.1 in multi-context mode. I have 2 contexts that require to run independent BGP instances. Is this a supported configuration? If yes, can you shed some light on the configuration side. Based on what I know the BGP process has to be enabled in the system context before it can be applied to the normal context. As far as I can see I can only enable one BGP AS in the system context mode.

[aaron.vieyra]

Hello,

Please be aware that setting two BGP instances on the ASA is not possible, see the limitations on the following link:

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118050-config-bgp-00.html

If we are talking about multiple context, the BGP instance need to be configured first on the system context, that been said, the ASA will display an error whenever a second BGP instance is tried to set up.

Regards,

Aaron.

[johnlloyd_13]

hi,

is the single BGP instance still a restriction?

i'm using FPR 3100 in ASA multiple mode.

it currently has a BGP config under the system and on a context and would like to add another BGP instance.

can someone advise and point me to a "new" cisco link using FPR appliance with ASA OS?

[ccieexpert]

multicontext has not changed AFAIK.. their is no new development as they are moving to multi-instance capability. One thing you can look into using multiple FTD instance .. each one will be a separate FTD image and instance and you have to divide up the cores between the instances... essentially like running multiple firewalls..

[johnlloyd_13]

hi,

the cisco doc wasn't explicit regarding this topic.

if the ASA 'system' context already has an existing BGP AS instance, say 65000 in context-a, i can re-use the same AS 65000 in context-b?

will this interrupt the BGP instance/operation in context-a?

is the BGP instance 65000 in context-b independent from the same BGP 65000 in context-a?