cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


396
Views
0
Helpful
7
Replies
Beginner

Import 450 Static Routes from ASA to FTD

Hi All,

I have a customer converting from ASA to FTD.

We are using the Migration Tool to convert the 4000 Access Rules and NAT's, and I am importing all the objects using the REST API.

However, the REST API does not support adding routes at the moment.

Obviously it would be an extremely length process to manually add in 450 Static Routes.

Is there any quick way of doing this? For example, extracting a config file to edit, or some secret API etc etc?

Any ideas welcome!

 

Thanks,

7 REPLIES 7
Hall of Fame Guru

Re: Import 450 Static Routes from ASA to FTD

Unfortunately there's no easy way to do this in the current release (6.2.2).

 

We hope to see that capability next spring but it's not officially confirmed.

Beginner

Re: Import 450 Static Routes from ASA to FTD

if you have yet this problem, I can write your routing convert script.
Highlighted
Hall of Fame Guru

Re: Import 450 Static Routes from ASA to FTD

Beginner

Re: Import 450 Static Routes from ASA to FTD

I'm not sure that this would be a supported approach, but have you considered using FlexConfig to deploy the routes?


In theory this would be a straight copy and paste. Lab it first before deploying to production obviously.


Edit - Static routing is blocked within FlexConfig, see below for more info:

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/flexconfig_policies.html

Beginner

Re: Import 450 Static Routes from ASA to FTD

Guys, 

This thread is over 2 years old.

This can now be done with the API.

And no, it cant be done with FlexConfig

Hall of Fame Guru

Re: Import 450 Static Routes from ASA to FTD

Commands that are available from the GUI (such as routing) are blacklisted in Flexconfig.

The API is also how CDO pushes configurations to FTD.

Beginner

Re: Import 450 Static Routes from ASA to FTD

Sorry, Ross. I realised that once I'd replied.

 

Glad you found a way forward.

CreatePlease to create content
Content for Community-Ad
FusionCharts will render here