FMC Rest API for HA Pair

rgomez12 — Wed, 15 Apr 2020 07:53:00 GMT

Hi,

I'm trying to get Subinterfaces created via FMC RestAPI but always receiving "BadRequest" response.

There is something not adding up which is the fact, "subinterfaces" is available under the "devicerecords", however this is an HA Pair. I've selected device ID for "Active" but still doesn't make a difference.

This is the URI,

/api/fmc_config/v1/domain/e276abec-e0f2-11e3-8169-6d9ed49b625f/devices/devicerecords/34db7df4-c27b-11e8-9c88-a8166172884a/subinterfaces?bulk=false

Where "34db7df4-c27b-11e8-9c88-a8166172884a" is the HA Active device ID returned on the "GET".

{
  "description": "Aaaaaaa-FW",
  "type": "SubInterface",
  "enabled": true,
  "MTU": 1500,
  "mode": "NONE",
  "subIntfId": 105,
  "ipv4": {
    "static": {
      "address": "192.168.0.1",
      "netmask": "25"
    }
  },
  "ifname": "Aaaaaaa-FW",
  "managementOnly": false,
  "enableAntiSpoofing": true,
  "securityZone": {
    "id": "88ca6be8-7e52-11ea-8a1c-71c9f258920c",
    "type": "SecurityZone"
  },
  "vlanId": 105,
  "fragmentReassembly": false,
  "name": "Port-Channel1"
}

I've confirmed the SZ ID "88ca6be8-7e52-11ea-8a1c-71c9f258920c" is correct via the GET Method in Objects/SecurityZones. Also maybe important to refer I'm trying to add sub-interface to an EtherChannel.

Any suggestions what I'm doing wrong?

Thanks,

Re: FMC Rest API for HA Pair

KRVE — Tue, 21 May 2024 14:15:52 GMT

Same issue, but I managed to do this with the device id of the standby node. ( just trial and error, trying with every DeviceID I could find )

topic Re: FMC Rest API for HA Pair in Network Security

FMC Rest API for HA Pair

Re: FMC Rest API for HA Pair