Posts

Showing posts from August, 2020

FTD CLI modes

Image
 There are three CLIs while dealing with a FTD deployment on Firepower platform: FSOX CLI --- Firepower-module> CLISH       --- > LINA CLI  --- firepower# Moving between different CLI''s FXOS >>> CLISH      connect ftd CLISH >>> LINA      system support diagnostic-cli LINA >>>CLISH        CTRL+a, d CLISH >>> FXOS      exit   Firepower  4100/ 9300  FXOS CLI Connects Diagram firepower# connect module 1 console (telnet) firepower# connect module 1 console Telnet escape character is '~'. Trying 127.5.1.1... Connected to 127.5.1.1. Escape character is '~'. CISCO Serial Over LAN: Close Network Connection to Exit Firepower-module1>? secure-login => Enable blade secure login show => Display system information. Enter show ? for options config => Configure the system. Enter config ? for options terminalLength => Terminal settings. Enter terminal ? for options ping

Firepower FMC and FTD troubleshooting

 1. Display real time log on FMC or FTD: pigtail for example: pigtail | grep 192.168.2.20                      pigtail | grep sftunnel 2. Restart communication channel manage_procs.pl run it from  the sensor only, run it from FMC will reset all sensors' channel. This scripts are nice to be used when the FMC and FTD have communication problems like heartbeats are not received, policy deployment is failing or events are not received > expert ************************************************************** NOTICE - Shell access will be deprecated in future releases          and will be replaced with a separate expert mode CLI. ************************************************************** admin@FTD:~$ sudo su Password: root@FTD:/home/admin# manage_procs.pl ****************  Configuration Utility  **************  1   Reconfigure Correlator  2   Reconfigure and flush Correlator  3    Restart Comm. channel  4   Update routes  5   Reset all routes  6   Validate Network  0   Exit *****