Import 450 Static Routes from ASA to FTD

[ross]

Hi All,

I have a customer converting from ASA to FTD.

We are using the Migration Tool to convert the 4000 Access Rules and NAT's, and I am importing all the objects using the REST API.

However, the REST API does not support adding routes at the moment.

Obviously it would be an extremely length process to manually add in 450 Static Routes.

Is there any quick way of doing this? For example, extracting a config file to edit, or some secret API etc etc?

Any ideas welcome!

Thanks,

[Marvin Rhoads]

Unfortunately there's no easy way to do this in the current release (6.2.2).

We hope to see that capability next spring but it's not officially confirmed.

[Jafar Tavana]

if you have yet this problem, I can write your routing convert script.

[Marvin Rhoads]

You can do it now using CDO (including routes):

https://docs.defenseorchestrator.com/Configuration_Guides/Migrating_an_ASA_Configuration_to_an_FTD_Template

[Ashley Hare]

I'm not sure that this would be a supported approach, but have you considered using FlexConfig to deploy the routes?

In theory this would be a straight copy and paste. Lab it first before deploying to production obviously.

Edit - Static routing is blocked within FlexConfig, see below for more info:

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/flexconfig_policies.html

[ross]

Guys, 

This thread is over 2 years old.

This can now be done with the API.

And no, it cant be done with FlexConfig

[Marvin Rhoads]

Commands that are available from the GUI (such as routing) are blacklisted in Flexconfig.

The API is also how CDO pushes configurations to FTD.

[Ashley Hare]

Sorry, Ross. I realised that once I'd replied.

Glad you found a way forward.