Firepower 1010 dhcp option configuration

[djpk05]

Hi,

I'm trying to configure my first Firepower 1010 replacing Fortigate.  Few things I'm stuck at the moment.

1. How can I configure dhcp options like 150?  I don't see that options anywhere in the FDM gui.  

2. Is there anything like software switch feature like Fortigate has?  I have a Cisco VoIP phone that is attached to Fortigate using sofware switch.

I'd really appreciate if you can suggest anything.

Thanks.

Peter

[Rob Ingram]

@djpk05 

No those DHCP options aren't configurable in FDM, you may be able to use FlexConfig and use the ASA syntax to deploy the command to the FTD.

The FPR1010 supports configuring interfaces as switch ports, refer here:-

https://www.cisco.com/c/en/us/td/docs/security/firepower/660/fdm/fptd-fdm-config-guide-660/fptd-fdm-interfaces.html#concept_32B051978CC24E7EA8361AB5384FB145

[djpk05]

Thanks for your quick reply.  I was reading about FlexConfig.  I'm little confused on FlexConfig.  How do I use FlexConfig?  Is it from CLI?  I'm sorry if I am asking a stupid question.  Thanks for your help.

[Rob Ingram]

@djpk05 Some of the FTD commands are configurable using ASA syntax and are available to be deployed to the FTD using only Flexconfig only. Flexconfig is configurable using FDM GUI only, not CLI. Refer to this link for more information.

https://www.cisco.com/c/en/us/td/docs/security/firepower/660/fdm/fptd-fdm-config-guide-660/fptd-fdm-advanced.html

Below is an example how to configure Flexconfig using FDM, it's not to deploy the DHCP option you require, but it will hopefully help you to configure.

https://networkwizkid.com/2021/04/15/cisco-secure-firewall-snmp-using-firepower-device-manager-fdm/

IMO, if possible you are probably better configuring DHCP on another device than the FTD. As you've noted you don't easily have the ability to apply advanced configuration.

[balaji.bandi]

Kind of CLI, but done on GUI (Tweak)

Not sure and familiar with FDM it works i guess.

Full features of FTD using FMC are good options.

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/fdm/fptd-fdm-config-guide-623/fptd-fdm-advanced.html

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/flexconfig_policies.html