Cisco ASA5520 multiple context revert back to single context

Hi all,
We have a redudant set of Cisco ASA5520's. This firewalls runs in multiple context mode.
No we want to make both "virtual" firewalls physical.
We already migrated on of the two firewalls to another physical set.
Now we would like to revert back the multiple context into single context mode, with keeping on of the two firewalls as the new running config.
We would like to do this with a minimum downtime.
Is this possible, can someone advise?
Kind regards,
Danny van der Aa

The config will be saved as config.old when you change the mode of the firewall (this goes both ways I believe).  As Luis has mentioned it is a major change but if you have ASA's in a failover pair then doing this with little or no down time should be possible.
I would first go about this by taking the current Standby ASA and take a backup of the running configuration on it, and make any required changes to the configuration to suite your needs.  Most likely you will not have much need of what is in the system context, but take a backup of it anyway just be on the safe side.  Then change it to single mode with the command "mode single".  Now copy the configuration into the ASA.
Now, assuming that both ASAs have the same IP addresses assigned to its interfaces, remove the currently active ASA and then connect the ASA that is now in single mode back into the network.  You may have to clear the MAC address table on some servers depending on how old they are and how touchy they are.
Do the same for the second ASA and connect it back to the network.  Now, if you have kept the failover configuration, the ASAs will setup an Active/Standby failover in single mode and replicate the configuration.
Your down time should only be dependent on how fast you can remove the second ASA and add the first ASA back to the network.
Please remember to rate and select a correct answer

Similar Messages

  • Revert back to single click commands?

    While using my iPhone 4 the system behavior changed where I now have to click on the app to select it, then double click to launch it. Same goes for entering in my password to access the phone and entering digits to make a phone. I am also having trouble swiping the screen to move to the next page.  This is no longer working. I did not change any settings, the phone just started behaving this way. Any ideas on how to revert back to the single click selection/launch? Any assistant is greatly appreciated. Thank you!

    The config will be saved as config.old when you change the mode of the firewall (this goes both ways I believe).  As Luis has mentioned it is a major change but if you have ASA's in a failover pair then doing this with little or no down time should be possible.
    I would first go about this by taking the current Standby ASA and take a backup of the running configuration on it, and make any required changes to the configuration to suite your needs.  Most likely you will not have much need of what is in the system context, but take a backup of it anyway just be on the safe side.  Then change it to single mode with the command "mode single".  Now copy the configuration into the ASA.
    Now, assuming that both ASAs have the same IP addresses assigned to its interfaces, remove the currently active ASA and then connect the ASA that is now in single mode back into the network.  You may have to clear the MAC address table on some servers depending on how old they are and how touchy they are.
    Do the same for the second ASA and connect it back to the network.  Now, if you have kept the failover configuration, the ASAs will setup an Active/Standby failover in single mode and replicate the configuration.
    Your down time should only be dependent on how fast you can remove the second ASA and add the first ASA back to the network.
    Please remember to rate and select a correct answer

  • Multiple Fiscal Calendar in a single context

    Hi,
    I know that for each context we can only have one PAS database, as a result, only a single Fiscal Calendar definition for a each context.
    My question is: there is any way of creating a workaround for this? I need to have in a single context KPI's that use different fiscal calendar's
    Thanks in advance for the tips
    Regards
    Pedro

    Hi Bob,
    so, if I understand correctly there is only two options:
    1 - Have a single PAS database with a single fiscal calendar and use that in a single Context. The user's will have the option to then create specific reports for the metrics that should be displayed using a different Fiscal (using for that the different options in time that already exist in the reports component).
    2 - Create an individual PAS database for each Fiscal and have a different context for each of those databases.
    Is like this?
    If you think strategically, that shouldn't change the usefullness of Strategy Management, since the status of objectives and KPIs will still be driven off your current numbers, whatever the fiscal calendar.
    Yes, but for instance if we have KPI's that use Fiscal form Jan to Dec and other from Jul to Jun, when we select yearly data for 2009 for example, the information displayed for both is not the "same". For KPI1 is from Jul 2009 to Jun 2010 when it should be Jan 2009 to Dec 2009 (this for a database with Fiscal Calendar starting at "Jul"). Is not like this?
    PS: It's strange than no one have this problem in the past. Is not normal to have a customer that want to see in the same Scorecard/Context, KPI's that use different Fiscal calendar?
    Thanks in advance
    Pedro
    Edited by: Pedro S. Costa on Sep 23, 2009 5:11 PM

  • Why does my music player on my iPhone 4 always revert back to the same song when in shuffle mode even tho I have played multiple songs since that first song was played.very frustrated

    Why does my music player on my iPhone 4 always revert back to the same song when in shuffle mode even tho I have played multiple songs since that first song was played.very frustrated

    SHuffle does not play songs in a truly random fashion.  Like all computer related random generators the sequence is pseudo-random

  • Install of latest Firefox upgrade won't complete, now having multiple problems and can't find how to revert back to previous mode.

    I got a prompt to upgrade, but the install mechanism just keeps looping, says connecting but nothing ever happens. Daily I get warnings to install, and each effort ends as above. Now some of the prompt boxes (such as "are you sure you want to delete...") appear in subdued/basic mode. I was going to simply revert back to the previous edition that worked, but can't find how to do that.

    I am having an issue with the Software Update also. The window says, "It is strongly recommended that you apply this update for Firefox as soon as possible"....It won't let me see the information of this update. I click on it as it highlights but nothing happens. So when I do click next it starts to update but updates all day long. It is not right. I thought maybe a virus? Could somebody tell me what to do? It is constantly happening everyday. thank You!!

  • Why does FF need to create 10,000 folders for the cache? How do I make it go back into single folder mode?

    Before it was x:\\Cache\"stuff"...Simple easy to find files if you need to.
    Now its..
    x:\\Cache\X\x1\"a little stuff"
    x:\\Cache\X\xA\"a little more stuff"
    x:\\Cache\X\x0\"a even more little stuff"
    x:\\Cache\X\x9\" crap... I'm lost now""
    What is the purpose for the extra folders? I want to be able to revert it back to single folder mode.

    You would need to revert to Firefox 3.6.23 to have the old cache setup.
    The multiple cache folder setup is to allow for a larger cache which works more efficiently that earlier versions worked.

  • TS5223 After my iphone updated to ios7, it reverted back to my old icloud account which I do not know the password, do not have access to the email it sends the reset to and the reset for security options say my birthday information is wrong.

    Help!!! I've lost all of my contacts and information after the ios7 update. After the update I plugged my phone into my MacBook and it reverted back to my old icloud account. I checked my MacBook and everything on there is connected to my new icloud account. I'm not sure why this has happened, but I have been trying for two days to get my new icloud account back. My phone won't allowe to log out of the icloud account it is logged into because I don't know the password. Simple solution, reset the password. Not so simple. I don't have the email address associated with the account anymore. So I attempted the security question option. When I entered my birthdate, it said that it was incorrect. I have tried multiple times and nothing will work. Can someone please help me??

    If you don't know your password, don't know your security questions and don't have a rescue address or don't receive a reset email, you should contact AppleCare who will initially try to assist you with a reset email or if unsuccessful will pass you to the security team to reset your security questions for you.
    If you are in a region that doesn't have international telephone support try contacting Apple through iTunes Store Support.

  • With Pages 5.2 how can i use multiple language types in a single document

    My Macbook Air Has the version 10.9.3
    I'm used to work with the old version of Page.
    But now I am using the new version of Pages 5.2 (1860).
    I want to know with the new version how do I use an multiple language types in a single document option.
    In the old  version of Pages I was using  Inspector -> Text -> "More" tab -> Language: British Inglese.
    In the new Pages 5.2 I do not know how to do it
    Could you help me?
    melo

    It's not possible to tag text with multiple languages in Pages 5.  Go back to Pages 4, which should still be in you iWork folder.
    For the whole doc in Pages 5, use Edit > Spellling and Grammar > Show Spelling and Grammar.

  • How Can I Use Multiple Weblogic Instances in a Single OS

    Hello Everyone,
    Actually I have to install Some different applications. Few of them need weblogic 10.3.6 and others need 10.3.4. The OS am using is Oracle  Enterprise Linux 5.
    Now I am able to install 2 separate(One of 10.3.4 and 10.3.6) instances with two different users,In two different directories.
    I have installed the weblogic 10.3.6 version with a user webadmin and installed node manager with port 5556. This is working fine.
    The main problem here is :
    In the second instance (10.3.4 ) installed with a a different user and gave the port number to NodeManager as 1600 and its not getting started. Its throwing error and also after some errors in the terminal am able to see that its reverting to port number 5556 only.
    What might be the issue?
    I have to install 2 different versions of weblogic in a single Server. But am failing with NodeManager. What Can I do to have multiple weblogic instances with multiple versions in a single server ?
    Can anyone suggest a resolution for this please ?
    Thanks in advance.

    Pl do not spam these forums with multiple posts - How Can I Use Multiple Weblogic Instances in a Single OS

  • Multiple TableExtension/Tableview in a single view...

    Hi,
           I'm facing a problem creating multiple TableExtension elements in a single view. The relationship between the business objects is like this.
    Header--->Order(s)--
    >Item(s)
    As you can see, each header can have multiple orders and each order can have multiple items.
    The number of orders is known only during runtime..
                  In the last page of my bsp application, created using component workbench, I should allow the user to view/edit item list of all orders found under a particular header. That is to say, the view should contain multiple EditList tables for editing items.
               But, I have only one context node for Item and I'm able to show only one table at a time. One solution that works, but not usable in my case is to use navigation buttons to change the Order focus entity. When the focus changes, the Item table shows relevant child entities of that particular order. But, only single table in that view and so, useless.
             Classic BSP application is a big NO. The table should allow customizing viewable columns and have toolbar buttons. The Chtmlb:tableExtension is very suitable and convenient while working with BOL objects, but how to generate multiple tables that are independent of each other?
    Please provide some pointers...
    Thanks,
    Arun Prakash
    Edited by: Arun Prakash Karuppanan on Jun 21, 2008 11:49 PM

    Hi,
          Got it. I used field symbol for specifying the table and looped the tableview tag the number of times I wanted. Each time, the tableview and configtable IDs are also generated uniquely, as I would need them later.  Each time, the field symbol is assigned by a method implemented in the controller. This controller method, creates a internal table dynamically and populates it with relevant data fetched from my BOL collection. Ofcourse, I need to implement a separate iterator class for the ConfigTable and use appropriate events to make changes to my BOL collection. It's a little bit complicated, but not impossible.
    Regards,
    Arun Prakash.

  • My Adobe Creative Suite 6 (I guess student edition) expired HELP! Can I revert back to CS5??

    Can I revert back to CS5?? (I have a comic deadline to make.)
    I know 5 is registered here on the site. It was a digital copy. I looked at my old laptop. (3 years old or so.) and noticed 5 on there. I can still use it. Some how my CS6 just up and quit working. Which I thought was funny considering I bought it the same way I bought my CS5. I am working on two comic series of my own that are going to be published as E-books and physical books and need some advice.
    I am left without Illustrator to use and I was right in the middle of working on all my character concept art to get trademarked.
    ( I can't afford the 357 upgrade to "re-open:" CS6 so I am left without anything to work on. All of my Illustrator files are also JPEG so i can view them all, but I was in the middle of new artwork when my CS6 decided to become a trial and I got locked out once the "Trial Period" ended.
    I am a legally blind Cartoonist and Comic Artist and these series are my first real big projects that are getting published. I really don't want to have this process stopped for any longer than it has been. It's been almost a month since I was able to draw. (I can draw on paper, but with my eyesight Adobe Creative suite is perfect for me and causes less strain on my eyes.) It's my preferred platform to work on as far as drawing.
    Hope somebody can help.
    (I just got married so I am low on funds at the moment. This project is my baby and I do not want to leave it unattended to for so long.)

    STEP 1:
    FOUND MY PROBLEM (or half of it.)
    I went into my computer and then program files.
    I found that EVERY SINGLE TIME I click any of the Adobe Applications that say (64 Bit) they give me that error message I showed you in an above post.
    STEP 2:
    I clicked Adobe in program files.
    STEP 3:
    I can SUCCESSFULLY open any of my Adobe Apps that are not (64 bit)
    It turns out all of my desktop shortcuts of my adobe apps were all coincidentally 64 bit ones that don't work.
    SO- in conclusion I think I have partly solved my problem.
    I replaced all of my app shortcuts with the normal program files and NOT the 64 bit ones. BUT- I am worried....aren't the 64 bit versions of ANY apps you buy important?
    I do feel worried since my WINDOWS 7 PROFESSIONAL is a 64 bit OS. This would effect my programs correct?
    Feel free to use my story to help you solve other customers' stories. I would like my problem looked into, but I am only half as stressed now.

  • I have been working on a book and have 418 photos already in my book.  All of a sudden I cannot access the book format to see the multiple view, spread view, or single view.  I can no longer see my book although I still see the collection with 418 photos

    I have been working on a book and have 418 photos already in my book.  All of a sudden I cannot access the book module and clicking on the multiple view, spread view, or single view does not take me back to the book I have been working on.  I can no longer see my book although I still see the collection with 418 photos under collections.  What I do see is a blank template for a new book and I can't find the unfinished book I started with 418 photos.  It is like the new empty template is somehow covering it up.  How do I get back to the book I have been working on?

    Is it possible you mistakenly clicked on a [Clear Layout] button?
    But a great hint is- Always click on the [Create a Saved Book] button, early in your new book design.
    Then you have a permanent link to the book in the Collections panel. (In addition to the standard collection of your selected images)
    Note: a Book Collection shows an icon that looks like a book.
    Every time you come back to edit the book, open the Book Module by clicking on the white arrow that appears on the end of your Book Collection title. (The title as saved)
    Re-opening a book without using the "Saved Book" option can have unpredictable results.
    A "Book" Collection is like a "Smart Collection" because anything you do to the book design, change pages, change images, etc,  is automatically updated in the Saved Book collection.

  • In IPhoto I have edited the order of my images. When I play the album on Apple TV the order reverts back to the time stamp. Any suggestions on how to get the images to play on my TV in the order I want?

    Apple TV won't play back my album images from IPhoto in the edited order I want. The order seems to revert back to the time stamp for the photos. I have combined the photos from 3 different cameras and they had slightly different clock settings. I am working on an edited presentation of about 1500 Pics from travels in Turkey this summer and sometimes the order makes more sense if I move some of the images quite a ways. Is there any solution short of changing the time stamp on every single image?

    Using the 'adjust date and time' setting is the best way to syncronise the photos from all your cameras. However as you say this merely puts them all in the correct order chronologically.
    If there are photos that you feel would be best somewhere else in an album other than in date order, it may depend on how many as to which is the best option for you. If it's only a few you may wish to adjust the date/time on these few manually so they fit in with the rest where you want them.
    If you have a lot of photos you want in a different order to the order by date, or you really don't care about what date/time is used and just want them in the order you want them in, then 'batch change' is the best option.
    From the view menu, select 'sort photos - manually', drag the photos around until they are in the order you want, select all of them. Now select the batch change option and choose 'Date' from the 'set' options, type in a date and time for the first photo, it can be anything but it's probably a good idea to choose something close to the original date, then check the box 'Add'. You can keep the value set at 1 minute or enter any value you want, it may be more realistic to divide the length of your holiday by the number of photos you have to calculate a value, but it really isn't necessary. Clicking OK will adjust all the dates without affecting the title or description and the photos will now show on the Apple TV in that order.
    Just to be sure iTunes is updated, you may want to go to the advanced menu/choose photos to share in iTunes and deselect the album, apply, reselect the album and apply again.

  • ATM clock source does not revert back to priority with NCDP

    We have an ATM network with 8540 and 8510 ATM switches. We have designed NCDP in such a way that that the priority 1,2,3,4 clock sources are the PABX. Priority 5 clock source is the internal system clock. Every few day we believe that there is a PABX issue whereby the clock fails over to the priority 5 internal system clock which is fair enough. But when the PABX clock becomes stable again the 85xx switches don't revert back to the PABX clock and stay using the internal system clock, although we have configured to revert. As a temporary work-around we have to remove and re-apply the ncdp commands for the 85xx to start using the PABX clock again.

    The following example shows how to configure the network clock to revert to the highest priority clock source after a failure and takeover by the source with the next lowest priority.
    Switch(config)# network-clock-select revertive
    http://www.cisco.com/en/US/products/hw/switches/ps718/products_configuration_guide_chapter09186a00801eda20.html

  • What is the best method to revert back to 'golden' image of database

    Hello,
    I want to have a 'golden' image of my test database. What is the best method to keep reverting back to this 'golden' image after testers are done with testing. What I mean is I want to set up a test database for testers. Testers can insert,update, delete on objects as they like. But after the testers have completed their testing, I want to revert the database back to the 'golden' image. This 'golden' image is the state of the database before testers perform their tests. I need to revert back to the 'golden' image many times over as we have to perform many different tests.
    I thought about export and import (9i database) but takes 6 hours, too long. I tried using rman and was successful the first time, (set until time; restore database; recover database; open resetlogs;). The seconde time using rman, I got error saying the set until time was before the resetlogs time. I think I would have to restore the control file before the resetlog time frame before I can recover to the set until time, again.
    What is a straight forward method to have a 'golden' image so I can keep on restoring back to it? This database is a test 9i database and it is in archive log mode but it doesn't need to be. I just need a best practice method, whether it is rman, exp/imp, manual backup/restore? Something I can use time and time over again. Thank you.

    If it is a Test envionment, can you just take a COLD Backup (database files
    plus control files) ? How big is the database ? What platform is it on ?
    eg in a COLD Backup
    a. If using a script, run multiple "cp" (or cpio/tar) commands in parallel to
    copy different database files
    b. If using RMAN (in NOMOUNT), use multiple Chnanels.
    Note : Remember to include ControlFile Backups and Restores as well.

Maybe you are looking for

  • TREX index and document search in 7.0

    Hello everyone, Could someone clarify next question? Is it possible to use TREX to index CRM 7.0 objects's attachments to search attachment? And if yes, could you provide me with roadmap and documents? Thank you in advance! Michael Wolff

  • Mediatomb GUI not displaying in Midori

    As in the title, when opening the Mediatomb web-based GUI in Midori, I can see just the background, top banner image and frames, but no text at all. It's the first time a website is not displaying properly, although I've only been using Midori for a

  • Disconnect user without GUI ?

    Hello, I'll like disconnect all of user in OBIEE during maintenance period. Is it possible to do it by web service, with the command nqcmd, etc? Thank! Edited by: 830315 on Nov 13, 2012 3:42 PM

  • I lost money with i changed my Apple ID, pls HELP

    Hi, so here's the situation: I had this account with 125USD in as credit and i wanted to change the Name and Email of the account as i wanted to give this account to my friend. After changing the Name and Email of this account, the credit reflected a

  • Case Expression syntax

    Hi, I am writing the below program. when case_not_found exception raises can any one help me.... declare   i integer := 10;   l_result NUMBER;   begin    l_result:= CASE i                  WHEN 1 THEN 2                    WHEN 2 THEN 3