Unable to ssh the FTD device

[suryaaa]

Dear Team, 

I unable to ssh the FTD device. No External authentication is configured. Local authentication enable. 

When ssh the device user name & password asking. After giving proper credentials access denied. But on same credentials we able to login the ftd device locally. 

Also able to ping ftd device. Please help. 

[Marvin Rhoads]

ssh access must use the admin username / account for local authentication method.

[suryaaa]

I already used admin user name. But stiill acess denied. Tell anything need to check

[Marvin Rhoads]

What model and version is your FTD? What do you mean by "same credentials we able to login the ftd device locally."? Console login or something else? Is the device managed with FDM or FMC?

[suryaaa]

FTD version 7.2.0 I am using. Locally login means console & device managed by FMC. Please tell if anything required. 

[Marvin Rhoads]

The only other thing I can think of would be the presence of an ssh access-list. But if that were present then you would not be prompted for username and password.

One other much less likely problem is the possibility of some other device with a conflicting IP address. It could be what is prompting you to login. You would be able to check that by looking at the ARP entries and MAC address table of the switch that your FTD management interface connects to.

If that all looks OK, then I would suggest opening a TAC case for hands-on troubleshooting

[mosesreza98]

Likely AAA/SSH config: set aaa authentication ssh console LOCAL, ensure SSH is enabled on the correct interface and your source IP is allowed. Confirm the local user is privilege 15, then bounce SSH (no ssh → ssh) or run debug aaa authentication to see why it’s denied.

[Marvin Rhoads]

@mosesreza98 the poster is asking about FTD. ASA instructions are not applicable.

[suryaaa]

Waiting for solution & suggestions. Please help