topic Re: FTD CLI doesn't accept Commands with backspaces in Network Security

FTD CLI doesn't accept Commands with backspaces

at@ps — Tue, 08 Oct 2024 08:37:24 GMT

Hey Folks,

I have FMC with 4 FTDs (7.2.8), I'm trying to run this command for example on the CLI

what I noticed, is that the Space key is not taken, and for any command that has space, the CLI sticks all laters together.

Also, I tried to run other commands with spaces, but the case is the same!!

I have this unusual behavior on all FTDs.

Any helpful thoughts?

Re: FTD CLI doesn't accept Commands with backspaces

Marvin Rhoads — Tue, 08 Oct 2024 15:09:37 GMT

Any Linux command must be run from expert mode and probably as superuser (su or root). The command you cited works fine in that mode:

Cisco Secure Firewall Threat Defense for VMware v7.6.0 (build 27) > expert admin@FTDv-1:~$ sudo su - Password: root@FTDv-1:~# grep -i -E "KexAlgorithms|MACs|Ciphers" /etc/ssh/sshd_config # CC and UCAPL modes have their own requirements about what ciphers can be enabled Ciphers aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes128-ctr,aes192-ctr MACs hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512 root@FTDv-1:~#

Re: FTD CLI doesn't accept Commands with backspaces

at@ps — Wed, 09 Oct 2024 07:11:41 GMT

I'm sure I run the command with the root user in expert mode.

Re: FTD CLI doesn't accept Commands with backspaces

Marvin Rhoads — Wed, 09 Oct 2024 13:52:00 GMT

at@ps I just confirmed it works on a Firepower 2130 running 7.2.8 (same version as your device):

Cisco Firepower Extensible Operating System (FX-OS) v2.12.1 (build 73) Cisco Firepower 2130 Threat Defense v7.2.8 (build 25) > expert admin@ftd-1:~$ sudo su - Password: root@ftd-1:~# grep -i -E "KexAlgorithms|MACs|Ciphers" /etc/ssh/sshd_config KexAlgorithms curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1 MACs hmac-sha2-512,hmac-sha2-256,hmac-sha1 Ciphers aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,chacha20-poly1305@openssh.com root@ftd-1:~#