topic Re: API VPN Configurations in Network Security

API VPN Configurations

Hkuespert — Fri, 21 Feb 2020 15:40:43 GMT

Are there any plans to allow VPN tunnel creation through the API? I can't find anything on this subject but have a bulk of VPNs to migrate from ASA. They weren't brought over using the FTD migration tool.

Re: API VPN Configurations

michoudi — Fri, 27 Apr 2018 22:40:25 GMT

I was looking for this feature too. So far, I haven't seen any mention if or when it might appear. I ended up spending many, many hours manually inputing L2L configurations.

Re: API VPN Configurations

Marvin Rhoads — Sun, 29 Apr 2018 14:45:47 GMT

FTD and FMC 6.2.3 added several API POST features but unfortunately not the ones needed for site-site VPN configuration.

We expect release 6.3 (~Fall 2018) will have a lot more API-based configuration options, including site-site VPN.

Re: API VPN Configurations

ecgbello07 — Fri, 25 Jan 2019 20:02:50 GMT

It has been a while since he last post. Any updates if L2L VPN functionality was added to the API in version 6.3?

Re: API VPN Configurations

Rob Ingram — Fri, 25 Jan 2019 20:10:08 GMT

Hi,

Yes, as per the 6.3 release notes

The FMC REST API supports new objects for site-to-site VPN topology and HA device failover.

New objects for site-to-site VPN topology: ftds2svpns, endpoints, ipsecsettings, advancedsettings, ikesettings, ikev1ipsecproposals, ikev1policies, ikev2ipsecproposals, ikev2policies

HTH

Re: API VPN Configurations

ecgbello07 — Fri, 25 Jan 2019 20:11:57 GMT

Great! Thanks for the quick reply

Re: API VPN Configurations

timboslice — Wed, 17 Jul 2019 20:04:24 GMT

Are there any examples/resources out there for importing s2s VPNs? Everything I'm finding is related to objects, which are relatively simple to do.

Re: API VPN Configurations

fiversen — Tue, 15 Oct 2019 09:24:16 GMT

Can someone give us an example of how to do the script because the example in the API Spec do just give "string" as an example so maybe you could supply us with something more useful.. just a thought :-).

Re: API VPN Configurations

Marvin Rhoads — Fri, 18 Oct 2019 12:08:22 GMT

The Firepower Migration Tool v2 (due out in the next month or so) will include VPN migration.

Re: API VPN Configurations

fiversen — Fri, 18 Oct 2019 12:48:58 GMT

Great, thank you 🙂 because I have an ASA with about 350 L2L tunnels and if I have to configure them via the GUI it'll take me many many many hours. For that reason, I haven't migrated to FTD yet.

Re: API VPN Configurations

MSJ1 — Sun, 07 Jul 2024 05:18:47 GMT

@Rob Ingram @Marvin Rhoads Hi Is there a sample documentation where it shows how to use below ?

ftds2svpns, endpoints, ipsecsettings, advancedsettings, ikesettings, ikev1ipsecproposals, ikev1policies, ikev2ipsecproposals, ikev2policies