topic Re: Firepower Secondary SSH in Network Security

Firepower Secondary SSH

jeremy-rogers — Tue, 18 May 2021 14:22:08 GMT

I have a firepower 4100 series setup as an HA pair that I just inherited. I am not familiar with this device. I noticed today that I can SSH into the primary FTD, but not the secondary. Is this normal? I just want to make sure there isn't anything wrong. In the FMC web interface, I am not seeing any problem. I just want to check and see if this is normal.

Thanks!

Re: Firepower Secondary SSH

Marvin Rhoads — Tue, 18 May 2021 15:42:31 GMT

Both devices' management interfaces should be available via ssh (as long as you did not apply an ssh-access-list via the FTD cli).

The default is that there is no restriction:

> show ssh-access-list 
ACCEPT     tcp  --  anywhere             anywhere             state NEW tcp dpt:ssh
ACCEPT     tcp      anywhere             anywhere             state NEW tcp dpt:ssh
>

Re: Firepower Secondary SSH

bcoverstone — Sun, 22 Jan 2023 05:56:21 GMT

This is a bug in Cisco FTD. Sometimes it works, sometimes it does not. I'll file a bug report in the next beta session.

Re: Firepower Secondary SSH

KeelynHenning0941 — Wed, 31 May 2023 18:11:15 GMT

Was the bug report completed by chance? Wondering what the bug ID is.