topic Re: You can create DHCP relay in Network Security

ftd dhcp relay with fdm

mmacdonald70 — Tue, 12 Mar 2019 09:12:46 GMT

I am running an ASA5506x in FTD mode. Managing it with FDM. I can't seem to find an option to create a DHCP relay. I have found documentation on how to do it with FMC so I assume that it is possible with FTD. Any idea if there is a way?

You can create DHCP relay

syeda3 — Thu, 13 Apr 2017 14:27:41 GMT

You can create DHCP relay services in Firepower Threat Defense (FTD) through FMC.

http://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200475-Configure-DHCP-Server-Relay-on-FTD-Using.html

Thanks. I assume by that

mmacdonald70 — Thu, 13 Apr 2017 14:30:23 GMT

Thanks. I assume by that answer that we can't add them through FDM or CLI? I don't have FMC at the moment and I wasn't planning on getting it.

Re: Thanks. I assume by that

mlacroix@ccm-ct.org — Tue, 03 Jul 2018 13:10:33 GMT

Hello, did you ever find a way to add dhcp relay/helper to FTD? I need the same thing. Thanks

Re: ftd dhcp relay with fdm

Filip Po — Wed, 07 Aug 2019 11:18:21 GMT

I used FlexConfig with Flex Object:

dhcprelay server <dhcp_server_IP> <server_interface_name>
dhcprelay setroute <relay_interface_name>
dhcprelay enable <relay_interface_name>

FDM will not let you have any dhcp server (DHCPD) running on vFTD image.

Erase all DHCP server (DHCPD) configuration befor apply dhcprelay to FlexConfig.

Filip

Re: ftd dhcp relay with fdm

schason@cisco.com — Thu, 12 Dec 2019 17:20:38 GMT

Re: ftd dhcp relay with fdm

bmurphree@myemma.com — Tue, 18 Feb 2020 14:57:18 GMT

Question for clarity's sake: When you say "Erase all DHCP server (DHCPD) configuration before apply dhcprelay to FlexConfig", is this for all DHCP pools, or just the one you plan to replace by DHCP-Relay?

Re: ftd dhcp relay with fdm

zascherl86 — Sun, 27 Sep 2020 18:51:28 GMT

To help clarify here is the process that you need to follow:

*note <server_interface_name> and <relay_interface_name> reference the Logical Name - ex. inside

*note you need to put the relay interface information for all interfaces you would like relayed

*note you can only use either relay or internal DHCP server. You cannot use them at the same time.

1. Create the FlexConfig Objects listed above

dhcprelay server <dhcp_server_IP> <server_interface_name>
dhcprelay setroute <relay_interface_name>
dhcprelay enable <relay_interface_name>

2. add the new DHCP-Realy FlexConfig Object to the FlexConfig Policy

- the FlexConfig Policy makes the object active

3. disable all dhcp server scopes

4. deploy

5. test

Re: You can create DHCP relay

bmurphree@myemma.com — Thu, 19 Nov 2020 19:33:34 GMT

I always assume the requester isn't using FMC, because there are a number of complex challenges with FMC use. I've abandoned FMC in favor of CDO, myself because of the connectivity requirements with FMC.

Re: ftd dhcp relay with fdm

mikiNet — Thu, 19 Nov 2020 23:16:45 GMT

dhcprelay setroute <relay_interface_name> - this is unnecessary

Re: You can create DHCP relay

BillXia — Thu, 14 Oct 2021 15:21:26 GMT

I am sure the requirement is to configure it through FDM not FMC. in order to configure dhcp relay, i need to buy a physical server, install FMC, buy FMC license (if any), purchase hardware protection for physical server, pay someone who knows how to manage VMs and reconfigure the whole firewall, because you cannot seamless convert fdm to fmc, just in order to get DHCP reply function? Maybe another good choice is to purchase a firewall from another vendor.

Re: You can create DHCP relay

Marvin Rhoads — Fri, 15 Oct 2021 04:09:28 GMT

There's no need to run FMC for this feature.

The dhcprelay feature for FDM-managed FTD devices was available via Flexconfig through version 6.7.

7.0 deprecated that in favor of API-based configuration.

https://www.cisco.com/c/en/us/td/docs/security/firepower/70/relnotes/firepower-release-notes-700/features.html#Cisco_Generic_Topic.dita_d931d244-1fa3-4144-b861-bc9a810332ce

It will be incorporated into the FDM GUI natively in version 7.1, due out next month.

Re: ftd dhcp relay with fdm

Mark Richmond — Mon, 18 Oct 2021 18:52:26 GMT

Hi, I know it's slightly old, but as it's one of the first hits that's flagged in Google, thought I'd mention that flexconfig is not available in v7, going API crazy and it's a bit more of a mission to implement dhcprelay and a few other commands, snmp, in the FDM for what used to be a very simple few lines

Reverted the test kit to 6.6 instead and completed in seconds.