topic Re: FDT CLI access question in Network Security

FDT CLI access question

Cisco3105 — Fri, 20 Oct 2023 00:52:43 GMT

Hello all,

I have setup my FTD to be managed by the FMC. When I tried to access the CLI through COM port, the password isnt accepted.

Do the CLI access gets disabled if the FTD is managed by the FMC?

Re: FDT CLI access question

balaji.bandi — Fri, 20 Oct 2023 07:05:48 GMT

No the CLI still works.

Re: FDT CLI access question

Marius Gunnerud — Fri, 20 Oct 2023 08:19:46 GMT

CLI access is not disabled and unless you have enabled SSH on a data interface via platform settings then you need to access the FTD via the management interface IP. The password you should be using is the one you created when setting up the FTD initially.

Re: FDT CLI access question

Cisco3105 — Fri, 20 Oct 2023 13:09:21 GMT

Thanks @Marius Gunnerud and @balaji.bandi

I had setup SSH access in Platform settings.

Is re-imaging the only way to reset the admin password? The password that I think I added does not seem to work no more

Re: FDT CLI access question

Marius Gunnerud — Fri, 20 Oct 2023 13:53:43 GMT

Is the FTD already managed by FMC but you have forgotten the password? If yes, then you could look into deploying remote authentication via platform settings and then reset the admin password once logged in (not entirely sure if resetting the admin password from a different account is possible but might be worth looking into.)

If the FTD is not managed by FMC yet, then the only way to reset the CLI password is to re-image the device.

https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118631-technote-firesight-00.html#toc-hId-926723679

Re: FDT CLI access question

balaji.bandi — Fri, 20 Oct 2023 13:54:56 GMT

depends on the model

look below thread :

https://community.cisco.com/t5/network-security/ftd-2120-password-recovery/td-p/3370615

Re: FDT CLI access question

Cisco3105 — Fri, 20 Oct 2023 13:59:39 GMT

FTD is managed by the FMC. I will try remote authentication

Re: FDT CLI access question

Cisco3105 — Fri, 20 Oct 2023 13:59:48 GMT

Its 3105

Re: FDT CLI access question

AViftrup — Fri, 20 Oct 2023 16:00:44 GMT

CLI doesn't get disabled.

You can do physical recover as mentioned in this topic, however I've previously created a blog post which describes how to perform remote password reset on your admin account, the only requirement is the possibility for pushing platform settings from FMC to FTD and having either LDAP or RADIUS server present. You'll be enabling external authentication, and elevate your rights inside expert mode to do password reset on the admin account.

https://blog.viftrup.eu/Remote-password-recovery-for-admin-user-ftd/

Re: FDT CLI access question

Cisco3105 — Fri, 20 Oct 2023 16:11:42 GMT

Thanks @AViftrup @Marius Gunnerud @balaji.bandi

I was able to reset the admin password by setting up external authentication and then following the link https://blog.viftrup.eu/Remote-password-recovery-for-admin-user-ftd/ to reset the admin password