cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
419
Views
0
Helpful
1
Replies

Configure DHCPRELAY Service using FTD REST API stead of FlexConnect

amralrazzaz
Level 5
Level 5

i have ASA FTD 5516-X & I have inside interfaces for each subnet vlan
G1/2 it-management
G1/3 it-lan
G1/4 it-printers
g1/5 it-officewifi
G1/6 it-guestwifi
and G1/1 outside

and i have 5 networkobjects for each vlan as below :

NET-it-management                VALUE: 10.1.2.0/24
NET- it-lan                              VALUE: 10.1.3.0/24
NET- it-printers                       VALUE: 10.1.4.0/24
NET- it-officewifi                     VALUE: 10.1.5.0/24
NET- it-guestwifi                     VALUE: 10.1.6.0/24

and i have 2 snmp server located somewhere and i need to configure both the primary and secondary as ip helper address or dhcp relay using the new feature Firepower Threat Defense REST API instead of flexconnect which i was using it before i upgrade IOS of ASA ftd !!

Primary DHCP server:  172.20.1.x

Secondary DHCP sever: 172.20.2.x

 

Now i found under API DHCPRelayService & i found 3 line as below

get /devicesettings/default/dhcprelayservices
get /devicesettings/default/dhcprelayservices/{objId}
put /devicesettings/default/dhcprelayservices/{objId}

so which one to use and i need real example accroding to my above inputs because im confused in which lines what i have to put !!

For example ill choose the below and im not sure if its right or wrong ! but if yes please need to add my inputs on below codes

get /devicesettings/default/dhcprelayservices/{objId}

{
"version": "string",
"name": "string",
"ipv4RelayTimeout": 0,
"ipv6RelayTimeout": 0,
"servers": [
{
"server": {
"id": "string",
"type": "string",
"version": "string",
"name": "string"
},
"interface": {
"id": "string",
"type": "string",
"version": "string",
"name": "string"
},
"type": "dhcprelayserver"
}
],
"agents": [
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string",
"type": "string",
"version": "string",
"name": "string"
},
"type": "dhcprelayagent"
}
],
"id": "string",
"type": "dhcprelayservice",
"links": {
"self": "string"
}
}

amr alrazzaz
1 Reply 1

amralrazzaz
Level 5
Level 5

i tried to make an actual example from the above an i hope to be correct and useful ,if any one can confirm,Thanks

 

{
"version": "string",
"name": "dhcprelay",
"ipv4RelayTimeout": 60,
"ipv6RelayTimeout": 60,
"servers": [
{
"server": {
"id": "string",
"type": "networkobject",
"version": "string",
"name": "PrimaryDHCPserver-172.20.1.x"
},
{
"server": {
"id": "string",
"type": "networkobject",
"version": "string",
"name": "SecondaryDHCPserver-172.20.2.x"
},
"interface": {
"id": "string",
"type": "physicalinterface",
"version": "string",
"name": "outside"
},
"type": "dhcprelayserver"
}
],
"agents": [
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string,
"type": "physicalinterface_it-management",
"version": "string",
"name": "it-management"
},
"type": "dhcprelayagent"
},
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string,
"type": "physicalinterface_it-lan",
"version": "string",
"name": "it-lan"
},
"type": "dhcprelayagent"
},
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string,
"type": "physicalinterface_it-officewifi",
"version": "string",
"name": "it-officewifi"
},
"type": "dhcprelayagent"
},
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string,
"type": "physicalinterface_it-printers",
"version": "string",
"name": "it-printers"
},
"type": "dhcprelayagent"
},
{
"enableIpv4Relay": true,
"enableIpv6Relay": true,
"setRoute": true,
"interface": {
"id": "string,
"type": "physicalinterface_it-guestwifi",
"version": "string",
"name": "it-guestwifi"
},
"type": "dhcprelayagent"
}
],
"id": "string",
"type": "dhcprelayservice",
"links": {
"self": "string"
}
}

amr alrazzaz
Review Cisco Networking for a $25 gift card