FPR 1120 ASA Security Context

[johnlloyd_13]

hi,

i'm trying to configure a FPR 1120 ASA multiple mode for 10 security context.

i tried to configure feature context 10 but it's not letting me do so. i saw total is only 3 using syntax help mode.

per FPR 1000 series data sheet, the 1120 context can go up to 5.

can someone advise if there's anything i missed or anything to add/configure in system context?

https://www.cisco.com/c/en/us/products/collateral/security/firepower-1000-series/datasheet-c78-742469.html

fw01/pri/act(config)# license smart
INFO: License(s) corresponding to an entitlement will be activated only after an entitlement request has been authorized.
fw01/pri/act(config-smart-lic)# feature context ?

smart-lic-mode mode commands/options:
<1-3> Specify the total number of security contexts for the device

[Flavio Miranda]

Hi

https://www.cisco.com/c/en/us/td/docs/security/asa/asa913/configuration/general/asa-913-general-config/ha-contexts.html#ID-2171-000000f4

Firepower 1100

Base License: 2 contexts. Optional License, Maximums: Firepower 1120: 5 Firepower 1140: 5 Firepower 1150: 25

[johnlloyd_13]

hi,

i already saw the datasheet and the context limit is 5.

my question is, why the syntax help showed only up to 3?

i can't even apply "feature context 5"

[Marvin Rhoads]

If I recall correctly, once you have slected and aplied multiple mode you already have two context created by default (system context and admin context). The feature command allows you to add the additional 3.

[Flavio Miranda]

What I was tried to show you is that with Base License you can get 2. For 5, you need Optional License.  As per your description, you might have Base license.

[johnlloyd_13]

hi marvin,

this seems unfair.

i thought the "system" and "admin" contexts are considered "free" and not counted in the license?

did this change with new ASA code/FPR platform?

[MHM Cisco World]

sorry you have license  of 5 ?

[MHM Cisco World]

@Marvin Rhoads  right check below 
(Optional) For the Context license, enter the number of contexts.

You can use 2 contexts without a license. The maximum number of contexts depends on your model:

• Firepower 1120—5 contexts

• Firepower 1140—10 contexts

• Firepower 1150—25 contexts

For example, to use the maximum of 5 contexts on the Firepower 1120, enter 3 for the number of contexts; this value is added to the default of 2.

really unfair 

[kommsec]

Hi,

Before in the ASA-5516x family in multiple context mode 2 context were included, which mean if you have a HA-cluster you had 2 + 2 + 1 (admin/system-context). Do you still have the same possibility with 1120/1150 (Base License: 2 contexts) and how achieve this configuration in HA-cluster with the new Smart Licensing model,

Regards