topic Re: Find object ID via FTD command-line in Network Security

Find object ID via FTD command-line

jslegers — Mon, 19 Jul 2021 08:21:01 GMT

Hello,

I want to delete a sub interface on one of our firewalls. But I get the following error :

How can I find this object via the command line of the FTD?

Re: Find object ID via FTD command-line

balaji.bandi — Mon, 19 Jul 2021 10:25:02 GMT

how are you managing the FTD using FMC? you can find objects explored in FMC?

on FTD command level example :

https://www.cisco.com/c/en/us/td/docs/security/firepower/command_ref/b_Command_Reference_for_Firepower_Threat_Defense/using_the_FTD_CLI.html

since the object is live, you need to unuse that object before you delete anything.

Re: Find object ID via FTD command-line

jslegers — Mon, 19 Jul 2021 10:43:21 GMT

Device is managed by FMC. I can't find the object in FMC if I look in the objects. I need to know what 30064849336_30064852343 for an object is.

Re: Find object ID via FTD command-line

balaji.bandi — Mon, 19 Jul 2021 11:55:54 GMT

i would check the associated rule in related to sub-interface you try to delete and back track

Re: Find object ID via FTD command-line

Chakshu Piplani — Mon, 19 Jul 2021 12:41:35 GMT

You can try to lookup for the object id from FTD clish mode >

Example:

> show running-config object id SVC_55834576804
object service SVC_55834576804
service tcp destination eq www

But you have to find it in FMC and remove it, trying looking for corresponding ACL rules, NAT statements, or any Routes which might be causing this error to display.

I would get the full config on a notepad by doing > show running-config and then search for that object.

Regards,

Chakshu

Do rate helpful posts!

Re: Find object ID via FTD command-line

jslegers — Fri, 06 Aug 2021 12:48:50 GMT

Hi,

It was the routing. Thanks for the tip.

Regards,

John