FTD 7.6 Lab
1. List the current users
> show user
Login UID Auth Access Enabled Reset Exp Warn Grace MinL Str Lock Max
admin 100 Local Config Enabled No 10000 7 Disabled 8 Ena No N/A
ftdlocal 11 Local Basic Enabled No 99999 7 Disabled 1 Dis No N/A
iseadmin1 1004 Remote Config Enabled N/A 99999 7 Disabled 1 Dis No N/A
scpuser 1001 Local Basic Enabled No 99999 7 Disabled 1 Dis No N/A
Login UID Auth Access Enabled Reset Exp Warn Grace MinL Str Lock Max
admin 100 Local Config Enabled No 10000 7 Disabled 8 Ena No N/A
ftdlocal 11 Local Basic Enabled No 99999 7 Disabled 1 Dis No N/A
iseadmin1 1004 Remote Config Enabled N/A 99999 7 Disabled 1 Dis No N/A
scpuser 1001 Local Basic Enabled No 99999 7 Disabled 1 Dis No N/A
2. Add a new user
> configure user add ftdadmin basic << user can't access expert mode
Enter new password for user ftdadmin:
Confirm new password for user ftdadmin:
Setting default time zone for user ftdadmin.
Time zone for user ftdadmin successfully updated to: America/New_York.
>
Enter new password for user ftdadmin:
Confirm new password for user ftdadmin:
Setting default time zone for user ftdadmin.
Time zone for user ftdadmin successfully updated to: America/New_York.
>
> configure user add ftdadmin2 config << user can access expert mode
Enter new password for user ftdadmin2:
Confirm new password for user ftdadmin2:
Setting default time zone for user ftdadmin2.
Time zone for user ftdadmin2 successfully updated to: America/New_York.
>
Enter new password for user ftdadmin2:
Confirm new password for user ftdadmin2:
Setting default time zone for user ftdadmin2.
Time zone for user ftdadmin2 successfully updated to: America/New_York.
>
Then first time SSH to FTD CLI, you will be asked to change the password
login as: ftdadmin
Pre-authentication banner message from server:
| NSW Lab --- FMC
|
End of banner message from server
Keyboard-interactive authentication prompts from server:
| Password:
| You are required to change your password immediately (administrator enforced)
> .
| Changing password for ftdadmin.
| Current password:
| New password:
| BAD PASSWORD: The password contains less than 1 non-alphanumeric characters
| New password:
| Retype new password:
End of keyboard-interactive prompts from server
Pre-authentication banner message from server:
| NSW Lab --- FMC
|
End of banner message from server
Keyboard-interactive authentication prompts from server:
| Password:
| You are required to change your password immediately (administrator enforced)
> .
| Changing password for ftdadmin.
| Current password:
| New password:
| BAD PASSWORD: The password contains less than 1 non-alphanumeric characters
| New password:
| Retype new password:
End of keyboard-interactive prompts from server
3. Verify the new user account in Expert mode.
admin@FTD76-A:~$ less /etc/passwd
...
ftdadmin:x:1005:1005::/ngfw/Volume/home/ftdadmin:/ngfw/usr/bin/clish
...
By default, a newly created user uses the Clish shell. To use SCP, the user's shell needs to be changed to the Bash shell.
root@FMC:/Volume/home/admin# usermod --shell /bin/bash admin
After this SCP to the FMC will work. Once done, please remeber to rollback:
root@FMC:/Volume/home/admin# usermod --shell /usr/bin/clish admin
Comments
Post a Comment