FTD CLI doesn't accept Commands with backspaces
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-08-2024 01:37 AM
Hey Folks,
I have FMC with 4 FTDs (7.2.8), I'm trying to run this command for example on the CLI
<grep -i -E "KexAlgorithms|MACs|Ciphers" /etc/ssh/sshd_config>
what I noticed, is that the Space key is not taken, and for any command that has space, the CLI sticks all laters together.
Also, I tried to run other commands with spaces, but the case is the same!!
I have this unusual behavior on all FTDs.
Any helpful thoughts?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-08-2024 08:08 AM - edited 10-08-2024 08:09 AM
Any Linux command must be run from expert mode and probably as superuser (su or root). The command you cited works fine in that mode:
Cisco Secure Firewall Threat Defense for VMware v7.6.0 (build 27)
> expert
admin@FTDv-1:~$ sudo su -
Password:
root@FTDv-1:~# grep -i -E "KexAlgorithms|MACs|Ciphers" /etc/ssh/sshd_config
# CC and UCAPL modes have their own requirements about what ciphers can be enabled
Ciphers aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes128-ctr,aes192-ctr
MACs hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com
KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512
root@FTDv-1:~#
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-09-2024 12:11 AM
I'm sure I run the command with the root user in expert mode.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-09-2024 06:22 AM - edited 10-09-2024 06:52 AM
at@ps I just confirmed it works on a Firepower 2130 running 7.2.8 (same version as your device):
Cisco Firepower Extensible Operating System (FX-OS) v2.12.1 (build 73)
Cisco Firepower 2130 Threat Defense v7.2.8 (build 25)
> expert
admin@ftd-1:~$ sudo su -
Password:
root@ftd-1:~# grep -i -E "KexAlgorithms|MACs|Ciphers" /etc/ssh/sshd_config
KexAlgorithms curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1
MACs hmac-sha2-512,hmac-sha2-256,hmac-sha1
Ciphers aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,chacha20-poly1305@openssh.com
root@ftd-1:~#
