Deploying ASA Multiple context

[S891]

Hi,

I am planning to migrate our FWSMs to ASA Multiple context. I will have 4 to 5 security context based on the different zones or functions within the network. From the config point of view it does not look very difficult. However, I would like to hear from folks who have experienced it and they type of issues faced during this migration. If there is anything should be concerned or careful about? 

Would appreciate your feedback. 

Thanks

[Marius Gunnerud]

This is a walk in the park.  Just be sure to have you physical setup well documented and that correct interfaces are allocated to the correct contexts as well as the actual design and planned traffic flow for the new setup.  Configuration is easy once the contexts are up and running.  If you have everything well documented and a good implementation plan there really isn't much to worry about.

--

Please remember to select a correct answer and rate helpful posts

[johnlloyd_13]

hi,

i have a different mindset when it comes to migration or any network activity.

don't assume it will always be flawless.

expect some config to be tweaked or troubleshooting along the way.

what's your FWSM version and do you have licenses installed?

[Marius Gunnerud]

Sure, you will most likely hit some minor hickups. There might be an access-list that might need some tweeking or perhaps there was an ARP issue if you keep the same IP as the old ASA, so you would need to clear the ARP cache on the router or L3 switch.  But what I am trying to say is that if you are well prepare you will not run into any major issues. that would result in a roll back.

--

Please remember to select a correct answer and rate helpful posts