cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
174
Views
1
Helpful
3
Replies

FTD CLI doesn't accept Commands with backspaces

at@ps
Level 1
Level 1

Hey Folks,

I have FMC with 4 FTDs (7.2.8), I'm trying to run this command for example on the CLI

<grep -i -E "KexAlgorithms|MACs|Ciphers" /etc/ssh/sshd_config>

what I noticed, is that the Space key is not taken, and for any command that has space, the CLI sticks all laters together.

Also, I tried to run other commands with spaces, but the case is the same!!

I have this unusual behavior on all FTDs.

Any helpful thoughts?

3 Replies 3

Marvin Rhoads
Hall of Fame
Hall of Fame

Any Linux command must be run from expert mode and probably as superuser (su or root). The command you cited works fine in that mode:

 

Cisco Secure Firewall Threat Defense for VMware v7.6.0 (build 27)

> expert
admin@FTDv-1:~$ sudo su -
Password: 
root@FTDv-1:~# grep -i -E "KexAlgorithms|MACs|Ciphers" /etc/ssh/sshd_config
#   CC and UCAPL modes have their own requirements about what ciphers can be enabled
Ciphers aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes128-ctr,aes192-ctr
MACs hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com
KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512
root@FTDv-1:~# 

 

I'm sure I run the command with the root user in expert mode.

 

at@ps I just confirmed it works on a Firepower 2130 running 7.2.8 (same version as your device):

 

Cisco Firepower Extensible Operating System (FX-OS) v2.12.1 (build 73)
Cisco Firepower 2130 Threat Defense v7.2.8 (build 25)

> expert
admin@ftd-1:~$ sudo su -
Password: 
root@ftd-1:~# grep -i -E "KexAlgorithms|MACs|Ciphers" /etc/ssh/sshd_config
KexAlgorithms curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1
MACs hmac-sha2-512,hmac-sha2-256,hmac-sha1
Ciphers aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,chacha20-poly1305@openssh.com
root@ftd-1:~#

 

Review Cisco Networking for a $25 gift card