topic Re: Firepower 1010 dhcp option configuration in Network Security

Firepower 1010 dhcp option configuration

djpk05 — Wed, 04 Aug 2021 19:01:50 GMT

Hi,

I'm trying to configure my first Firepower 1010 replacing Fortigate. Few things I'm stuck at the moment.

1. How can I configure dhcp options like 150? I don't see that options anywhere in the FDM gui.

2. Is there anything like software switch feature like Fortigate has? I have a Cisco VoIP phone that is attached to Fortigate using sofware switch.

I'd really appreciate if you can suggest anything.

Thanks.

Peter

Re: Firepower 1010 dhcp option configuration

Rob Ingram — Wed, 04 Aug 2021 19:10:42 GMT

@djpk05

No those DHCP options aren't configurable in FDM, you may be able to use FlexConfig and use the ASA syntax to deploy the command to the FTD.

The FPR1010 supports configuring interfaces as switch ports, refer here:-

https://www.cisco.com/c/en/us/td/docs/security/firepower/660/fdm/fptd-fdm-config-guide-660/fptd-fdm-interfaces.html#concept_32B051978CC24E7EA8361AB5384FB145

Re: Firepower 1010 dhcp option configuration

djpk05 — Wed, 04 Aug 2021 19:27:32 GMT

Thanks for your quick reply. I was reading about FlexConfig. I'm little confused on FlexConfig. How do I use FlexConfig? Is it from CLI? I'm sorry if I am asking a stupid question. Thanks for your help.

Re: Firepower 1010 dhcp option configuration

Rob Ingram — Wed, 04 Aug 2021 19:41:38 GMT

@djpk05 Some of the FTD commands are configurable using ASA syntax and are available to be deployed to the FTD using only Flexconfig only. Flexconfig is configurable using FDM GUI only, not CLI. Refer to this link for more information.

https://www.cisco.com/c/en/us/td/docs/security/firepower/660/fdm/fptd-fdm-config-guide-660/fptd-fdm-advanced.html

Below is an example how to configure Flexconfig using FDM, it's not to deploy the DHCP option you require, but it will hopefully help you to configure.

https://networkwizkid.com/2021/04/15/cisco-secure-firewall-snmp-using-firepower-device-manager-fdm/

IMO, if possible you are probably better configuring DHCP on another device than the FTD. As you've noted you don't easily have the ability to apply advanced configuration.

Re: Firepower 1010 dhcp option configuration

balaji.bandi — Wed, 04 Aug 2021 19:37:38 GMT

Kind of CLI, but done on GUI (Tweak)

Not sure and familiar with FDM it works i guess.

Full features of FTD using FMC are good options.

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/fdm/fptd-fdm-config-guide-623/fptd-fdm-advanced.html

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/flexconfig_policies.html