Firepower API for - Script Static Routes

[paultribe]

I do quite a few ASA to FTD migrations and many customers want a "Big Bang" approach. I am familiar with all the Migration tools that Cisco offer but they do have their limitations. The limitation for me is that I have a customer who has 200 static routes and although the new migration tool supports import of static routes I cannot use this as it also requires that the new FTD is migrated on to a "clean" FMC.

I am therefore reaching out to see if anyone out there has managed to write an API script that could be used for this. Unfortunately I got into networking & security way before programming was important so am not very good with tools such as Python, JSON and Postmaster etc. I am trying to go through the DevNet course but have little time so wandered if anyone could help.

Regards

Paul T 

[ngkin2010]

Hi,

Are you looking for script/python code that could:
1. read the static route statement from ASA (by manual input)
2. add the corresponding static route entry to FTD via RESTful API

[paultribe]

That sounds about right, with the caveat that I would like to add several static routes from ASA to FTD in one go of course...

[ngkin2010]

Hi,

You may refer to FTD-API Reference to read the API usage. And it also provides the sample code (in Bash or Python) for you to kick start.

First, you authenticate with FTD to obtain OAuth token.
https://developer.cisco.com/site/ftd-api-reference/#!authenticating-your-rest-api-client-using-oauth

Then, you add the static route by call the 'staticrouteentry' api.
https://developer.cisco.com/site/ftd-api-reference/#!staticrouteentry/staticrouteentry

If I have time, I would write a basic version Python for you in later.

I am not experienced in migrating ASA to FTD, so someone have a better solution for @paultribe, please kindly advise.

[paultribe]

This sounds great to me - if you do get time it would be great; however don't feel you have to.

I would be happy to share in return a training document I wrote for my colleagues which is easier (I think), than following Cisco's guides. Its aimed at getting to know FMC and FTD in a Greenfield environment so has context around it and takes you through some common features of Firepower. Especially for those new to Firewalls.