topic Re: Unable to SSH to FMC after enter some command line in Network Security

Unable to SSH to FMC after enter some command line

tiangeng-li — Thu, 28 Nov 2024 17:35:56 GMT

Hi,

I no longer SSH to FMC after enter command line below:

In FMC 6.4 and above, SCP to the FMC is not possible directly. For that, the following is needed(the below is intended for user: admin):
root@FMC:/Volume/home/admin# usermod --shell /bin/bash admin

After this SCP to the FMC will work. Once done, please remeber to rollback(prior to closing the session) else admin login can have issues:

root@FMC:/Volume/home/admin# usermod --shell /usr/bin/clish admin

Can someone help?

Re: Unable to SSH to FMC after enter some command line

Marius Gunnerud — Thu, 28 Nov 2024 22:32:18 GMT

So even after entering usermod --shell /usr/bin/clish admin you are unable to SSH to the FMC? have you tried using sudo usermod --shell /usr/bin/clish admin ?

Re: Unable to SSH to FMC after enter some command line

tiangeng-li — Fri, 29 Nov 2024 01:14:53 GMT

Yes, I did. unfortunately, I am not able to SSH anymore, is there any work around?

Re: Unable to SSH to FMC after enter some command line

Marvin Rhoads — Fri, 29 Nov 2024 02:51:46 GMT

If it is an FMCv, you can use the console connection from the hypervisor to revert the change. If it is a physical appliance, the console can be accessed either via direct physical keyboard and monitor connection or via the CIMC interface.

Re: Unable to SSH to FMC after enter some command line

tiangeng-li — Fri, 29 Nov 2024 03:13:47 GMT

thanks, correct me if I am wrong, I can still access FMC by connecting console port from my laptop, normal I just use Putty to console in the FMC, I should be able to enter admin and password. what's the next step, how to make SSH works again?

Re: Unable to SSH to FMC after enter some command line

Marvin Rhoads — Fri, 29 Nov 2024 05:22:08 GMT

To change back to the default FMC shell:

#chsh select "/usr/bin/clish"

"clish" (command-line interface shell) is the factory default.

Also, generally it is not necessary to use scp to upload files from FMC. Instead, simply place them /var/common and then they can be uploaded using the FMC GUI.

Small files can be downloaded onto FMC by using the Unix "cat" command. Go into expert mode, switch to root user and change directory into the desired folder. The simply "cat > newfile" (substitute the actual file name for "newfile"). Paste in the file text and then a block line, use Ctrl-C to exit. The newfile will then be in the current directory. chmod as necessary if, for example, you need to make it executable.

Re: Unable to SSH to FMC after enter some command line

tiangeng-li — Mon, 02 Dec 2024 01:25:18 GMT

thanks, that helps a lot.