Configure DHCPRELAY Service using FTD REST API stead of FlexConnect

amralrazzaz — Thu, 28 Nov 2024 19:38:42 GMT

i have ASA FTD 5516-X & I have inside interfaces for each subnet vlan
G1/2 it-management
G1/3 it-lan
G1/4 it-printers
g1/5 it-officewifi
G1/6 it-guestwifi
and G1/1 outside

and i have 5 networkobjects for each vlan as below :

NET-it-management VALUE: 10.1.2.0/24
NET- it-lan VALUE: 10.1.3.0/24
NET- it-printers VALUE: 10.1.4.0/24
NET- it-officewifi VALUE: 10.1.5.0/24
NET- it-guestwifi VALUE: 10.1.6.0/24

and i have 2 snmp server located somewhere and i need to configure both the primary and secondary as ip helper address or dhcp relay using the new feature Firepower Threat Defense REST API instead of flexconnect which i was using it before i upgrade IOS of ASA ftd !!

Primary DHCP server: 172.20.1.x

Secondary DHCP sever: 172.20.2.x

Now i found under API DHCPRelayService & i found 3 line as below

get /devicesettings/default/dhcprelayservices
get /devicesettings/default/dhcprelayservices/{objId}
put /devicesettings/default/dhcprelayservices/{objId}

so which one to use and i need real example accroding to my above inputs because im confused in which lines what i have to put !!

For example ill choose the below and im not sure if its right or wrong ! but if yes please need to add my inputs on below codes

get /devicesettings/default/dhcprelayservices/{objId}

{
"version": "string",
"name": "string",
"ipv4RelayTimeout": 0,
"ipv6RelayTimeout": 0,
"servers": [
{
"server": {
"id": "string",
"type": "string",
"version": "string",
"name": "string"
},
"interface": {
"id": "string",
"type": "string",
"version": "string",
"name": "string"
},
"type": "dhcprelayserver"
}
],
"agents": [
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string",
"type": "string",
"version": "string",
"name": "string"
},
"type": "dhcprelayagent"
}
],
"id": "string",
"type": "dhcprelayservice",
"links": {
"self": "string"
}
}

Re: Configure DHCPRELAY Service using FTD REST API stead of FlexConnec

amralrazzaz — Wed, 04 Dec 2024 11:37:31 GMT

i tried to make an actual example from the above an i hope to be correct and useful ,if any one can confirm,Thanks

{
"version": "string",
"name": "dhcprelay",
"ipv4RelayTimeout": 60,
"ipv6RelayTimeout": 60,
"servers": [
{
"server": {
"id": "string",
"type": "networkobject",
"version": "string",
"name": "PrimaryDHCPserver-172.20.1.x"
},
{
"server": {
"id": "string",
"type": "networkobject",
"version": "string",
"name": "SecondaryDHCPserver-172.20.2.x"
},
"interface": {
"id": "string",
"type": "physicalinterface",
"version": "string",
"name": "outside"
},
"type": "dhcprelayserver"
}
],
"agents": [
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string,
"type": "physicalinterface_it-management",
"version": "string",
"name": "it-management"
},
"type": "dhcprelayagent"
},
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string,
"type": "physicalinterface_it-lan",
"version": "string",
"name": "it-lan"
},
"type": "dhcprelayagent"
},
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string,
"type": "physicalinterface_it-officewifi",
"version": "string",
"name": "it-officewifi"
},
"type": "dhcprelayagent"
},
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string,
"type": "physicalinterface_it-printers",
"version": "string",
"name": "it-printers"
},
"type": "dhcprelayagent"
},
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string,
"type": "physicalinterface_it-guestwifi",
"version": "string",
"name": "it-guestwifi"
},
"type": "dhcprelayagent"
}
],
"id": "string",
"type": "dhcprelayservice",
"links": {
"self": "string"
}
}

topic Configure DHCPRELAY Service using FTD REST API stead of FlexConnect in Network Security

Configure DHCPRELAY Service using FTD REST API stead of FlexConnect

Re: Configure DHCPRELAY Service using FTD REST API stead of FlexConnec