11-28-2024 06:13 AM - edited 11-28-2024 11:38 AM
i have ASA FTD 5516-X & I have inside interfaces for each subnet vlan
G1/2 it-management
G1/3 it-lan
G1/4 it-printers
g1/5 it-officewifi
G1/6 it-guestwifi
and G1/1 outside
and i have 5 networkobjects for each vlan as below :
NET-it-management VALUE: 10.1.2.0/24
NET- it-lan VALUE: 10.1.3.0/24
NET- it-printers VALUE: 10.1.4.0/24
NET- it-officewifi VALUE: 10.1.5.0/24
NET- it-guestwifi VALUE: 10.1.6.0/24
and i have 2 snmp server located somewhere and i need to configure both the primary and secondary as ip helper address or dhcp relay using the new feature Firepower Threat Defense REST API instead of flexconnect which i was using it before i upgrade IOS of ASA ftd !!
Primary DHCP server: 172.20.1.x
Secondary DHCP sever: 172.20.2.x
Now i found under API DHCPRelayService & i found 3 line as below
get /devicesettings/default/dhcprelayservices
get /devicesettings/default/dhcprelayservices/{objId}
put /devicesettings/default/dhcprelayservices/{objId}
so which one to use and i need real example accroding to my above inputs because im confused in which lines what i have to put !!
For example ill choose the below and im not sure if its right or wrong ! but if yes please need to add my inputs on below codes
get /devicesettings/default/dhcprelayservices/{objId}
{
"version": "string",
"name": "string",
"ipv4RelayTimeout": 0,
"ipv6RelayTimeout": 0,
"servers": [
{
"server": {
"id": "string",
"type": "string",
"version": "string",
"name": "string"
},
"interface": {
"id": "string",
"type": "string",
"version": "string",
"name": "string"
},
"type": "dhcprelayserver"
}
],
"agents": [
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string",
"type": "string",
"version": "string",
"name": "string"
},
"type": "dhcprelayagent"
}
],
"id": "string",
"type": "dhcprelayservice",
"links": {
"self": "string"
}
}
12-04-2024 03:36 AM - edited 12-04-2024 03:37 AM
i tried to make an actual example from the above an i hope to be correct and useful ,if any one can confirm,Thanks
{
"version": "string",
"name": "dhcprelay",
"ipv4RelayTimeout": 60,
"ipv6RelayTimeout": 60,
"servers": [
{
"server": {
"id": "string",
"type": "networkobject",
"version": "string",
"name": "PrimaryDHCPserver-172.20.1.x"
},
{
"server": {
"id": "string",
"type": "networkobject",
"version": "string",
"name": "SecondaryDHCPserver-172.20.2.x"
},
"interface": {
"id": "string",
"type": "physicalinterface",
"version": "string",
"name": "outside"
},
"type": "dhcprelayserver"
}
],
"agents": [
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string,
"type": "physicalinterface_it-management",
"version": "string",
"name": "it-management"
},
"type": "dhcprelayagent"
},
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string,
"type": "physicalinterface_it-lan",
"version": "string",
"name": "it-lan"
},
"type": "dhcprelayagent"
},
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string,
"type": "physicalinterface_it-officewifi",
"version": "string",
"name": "it-officewifi"
},
"type": "dhcprelayagent"
},
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string,
"type": "physicalinterface_it-printers",
"version": "string",
"name": "it-printers"
},
"type": "dhcprelayagent"
},
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string,
"type": "physicalinterface_it-guestwifi",
"version": "string",
"name": "it-guestwifi"
},
"type": "dhcprelayagent"
}
],
"id": "string",
"type": "dhcprelayservice",
"links": {
"self": "string"
}
}
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide