topic Re: FPR 1010 DHCP Settings in Network Security

FPR 1010 DHCP Settings

Lee Dress — Thu, 08 Oct 2020 14:02:30 GMT

I'm setting up new FPR 1010 devices to replace end of life ASA 5506x.

on the 5506 there was a place to define the domain name in DHCP for clients on the inside.

the FPR1010 (managed locally) does not seem to give me a way to do this.

is there any way I can define the dhcp domain name? maybe through command line or something?

finding good documentation on the device is challenging.

any help is appreciated.

Lee

P.S. please don't send me info on how to do this in FMC. the devices are managed locally and won't be managed by FMC..

Re: FPR 1010 DHCP Settings

Rob Ingram — Thu, 08 Oct 2020 14:47:26 GMT

On the current latest version FDM 6.6, I see no specific option in the GUI. Use Flexconfig to push out the ASA command to the FTD.

Re: FPR 1010 DHCP Settings

Lee Dress — Thu, 08 Oct 2020 15:36:08 GMT

DHCP Commands are blocked in flexconfig

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/flexconfig_policies.html#reference_ztv_qvw_yx

Re: FPR 1010 DHCP Settings

Rob Ingram — Thu, 08 Oct 2020 16:42:14 GMT

You are referencing a version 6.2.3 guide for FMC. Version 6.4 is the first supported release for the FPR1010 series hardware, so you can't be running such an old version. Have you actually tried configuring the command using Flexconfig and applying policy?

I've tested and confirms it works for you:

Re: FPR 1010 DHCP Settings

Lee Dress — Thu, 08 Oct 2020 17:35:27 GMT

I'm on 6.5.0.4

could you explain how to do this and I will test.

I don't know how you did this. I appreciate it.

Re: FPR 1010 DHCP Settings

Rob Ingram — Thu, 08 Oct 2020 17:50:11 GMT

Create a FlexConfig object, then reference that object in a Flexconfig Policy.

Re: FPR 1010 DHCP Settings

Lee Dress — Thu, 08 Oct 2020 17:56:56 GMT

I get "blacklisted cli error dhcpd domain my.domain" when I try to create the object.

Re: FPR 1010 DHCP Settings

Rob Ingram — Thu, 08 Oct 2020 18:01:17 GMT

I was testing using 6.6, unfortunately you'll probably need to upgrade.

Re: FPR 1010 DHCP Settings

Lee Dress — Thu, 08 Oct 2020 18:07:02 GMT

I will try 6.6. I'll let you know. I have a device that absolutely needs this so it's worth a try.

Thank you for the help. I'll let you know if 6.6. fixed it.

Re: FPR 1010 DHCP Settings

Lee Dress — Thu, 08 Oct 2020 19:36:34 GMT

using 6.6 on my test unit resolved the issue.

thank you for the help!

I will upgrade my production unit this evening.