topic Import 450 Static Routes from ASA to FTD in Network Security

Import 450 Static Routes from ASA to FTD

ross — Fri, 21 Feb 2020 14:35:55 GMT

Hi All,

I have a customer converting from ASA to FTD.

We are using the Migration Tool to convert the 4000 Access Rules and NAT's, and I am importing all the objects using the REST API.

However, the REST API does not support adding routes at the moment.

Obviously it would be an extremely length process to manually add in 450 Static Routes.

Is there any quick way of doing this? For example, extracting a config file to edit, or some secret API etc etc?

Any ideas welcome!

Thanks,

Marvin Rhoads — Mon, 30 Oct 2017 15:58:56 GMT

Unfortunately there's no easy way to do this in the current release (6.2.2).

We hope to see that capability next spring but it's not officially confirmed.

Jafar Tavana — Sun, 12 Jan 2020 10:20:30 GMT

if you have yet this problem, I can write your routing convert script.

Marvin Rhoads — Sun, 12 Jan 2020 11:40:13 GMT

You can do it now using CDO (including routes):

Ashley Hare — Mon, 13 Jan 2020 14:21:02 GMT

I'm not sure that this would be a supported approach, but have you considered using FlexConfig to deploy the routes?

In theory this would be a straight copy and paste. Lab it first before deploying to production obviously.

Edit - Static routing is blocked within FlexConfig, see below for more info:

ross — Mon, 13 Jan 2020 14:12:55 GMT

Guys,

This thread is over 2 years old.

This can now be done with the API.

And no, it cant be done with FlexConfig

Marvin Rhoads — Mon, 13 Jan 2020 14:16:02 GMT

Commands that are available from the GUI (such as routing) are blacklisted in Flexconfig.

The API is also how CDO pushes configurations to FTD.

Ashley Hare — Mon, 13 Jan 2020 14:16:27 GMT

Sorry, Ross. I realised that once I'd replied.

Glad you found a way forward.