FDT CLI access question

[Cisco3105]

Hello all,

I have setup my FTD to be managed by the FMC. When I tried to access the CLI through COM port, the password isnt accepted.

Do the CLI access gets disabled if the FTD is managed by the FMC?

[balaji.bandi]

No the CLI still works.

[Marius Gunnerud]

CLI access is not disabled and unless you have enabled SSH on a data interface via platform settings then you need to access the FTD via the management interface IP. The password you should be using is the one you created when setting up the FTD initially.

[Cisco3105]

Thanks @Marius Gunnerud and @balaji.bandi 

I had setup SSH access in Platform settings.

Is re-imaging the only way to reset the admin password? The password that I think I added does not seem to work no more

[Marius Gunnerud · Accepted solution]

Is the FTD already managed by FMC but you have forgotten the password?  If yes, then you could look into deploying remote authentication via platform settings and then reset the admin password once logged in (not entirely sure if resetting the admin password from a different account is possible but might be worth looking into.)

If the FTD is not managed by FMC yet, then the only way to reset the CLI password is to re-image the device.

https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118631-technote-firesight-00.html#toc-hId-926723679

[Cisco3105]

FTD is managed by the FMC. I will try remote authentication

[balaji.bandi]

depends on the model

look below thread :

https://community.cisco.com/t5/network-security/ftd-2120-password-recovery/td-p/3370615

[Cisco3105]

Its 3105

[AViftrup · Accepted solution]

CLI doesn't get disabled.

You can do physical recover as mentioned in this topic, however I've previously created a blog post which describes how to perform remote password reset on your admin account, the only requirement is the possibility for pushing platform settings from FMC to FTD and having either LDAP or RADIUS server present. You'll be enabling external authentication, and elevate your rights inside expert mode to do password reset on the admin account.

https://blog.viftrup.eu/Remote-password-recovery-for-admin-user-ftd/

[Cisco3105]

Thanks @AViftrup @Marius Gunnerud @balaji.bandi 

I was able to reset the admin password by setting up external authentication and then following the link https://blog.viftrup.eu/Remote-password-recovery-for-admin-user-ftd/ to reset the admin password