topic Re: FTD CLI in Network Security

FTD CLI

BertrandAbegaKpama64056 — Fri, 24 Dec 2021 15:29:03 GMT

Hello Guys,

Can someone please tell me the command to initiate SSH to FTD IP from FMC CLI ?

Cheers

Re: FTD CLI

Marvin Rhoads — Sat, 25 Dec 2021 07:29:56 GMT

Current FMC versions run a shell environment on top of the underlying Linux OS.

To initiate an ssh session from within that FMC shell, you need to first switch to "expert" mode which is the Linux cli. Then you can run any Linux command including "ssh".

Re: FTD CLI

BertrandAbegaKpama64056 — Sat, 25 Dec 2021 11:46:02 GMT

Merry Christmas Marvin,

Thank you very much for your answer.

you mean from FMC CLI > expert and then

# ssh username@FTD ip address right ?

Cheers

Re: FTD CLI

Marvin Rhoads — Mon, 27 Dec 2021 01:30:00 GMT

Correct. See this example:

> show version
----------------------[ fmc ]-----------------------
Model                     : Cisco Firepower Management Center for VMware (66) Version 7.1.0 (Build 47)
UUID                      : c7b3d07c-0c10-11ec-a84b-e43bb1e80405
Rules update version      : 2021-12-01-001-vrt
LSP version               : lsp-rel-20211201-1517
VDB version               : 347
----------------------------------------------------

> expert
admin@fmc:~$ ssh admin@172.31.4.3
Password: 
Last login: Mon Dec 27 01:28:13 UTC 2021 from 172.31.1.30 on pts/0

Copyright 2004-2021, Cisco and/or its affiliates. All rights reserved. 
Cisco is a registered trademark of Cisco Systems, Inc. 
All other trademarks are property of their respective owners.

Cisco Firepower Extensible Operating System (FX-OS) v2.11.1 (build 31)
Cisco Firepower Threat Defense for VMware v7.1.0 (build 47)

> show inventory
Name: "Chassis", DESCR: "Next Generation Firewall Virtual Appliance"
PID: NGFWv             , VID: V01     , SN: 9A1K33MP0AG

>