On the Firepower and Secure Firewall device models, the CLI on the Console
port is the Firepower eXtensible Operating System (FXOS). For the Firepower
1000/2100, you can get to the Firepower Threat Defense CLI using the connect
ftd command. For the Firepower 4100/9300, see Connect to the Console of the
Application. Use the FXOS CLI for chassis-level troubleshooting only. Use the
Firepower Threat Defense CLI for basic configuration, monitoring, and normal
system troubleshooting. See the FXOS documentation for information on FXOS
commands.
Note
• For the FTDv, open the virtual console.
• Use an SSH client to make a connection to the management IP address. You can also connect to the
address on a data interface if you open the interface for SSH connections (see Configuring the Management
Access List). SSH access to data interfaces is disabled by default. Log in using the admin username or
another CLI user account. The default admin password is Admin123. On AWS, the default admin
password for the FTDv is the AWS Instance ID, unless you define a default password with user data
(Advanced Details > User Data) during the initial deployment.
Tips
• After logging in, for information on the commands available in the CLI, enter help or ?. For usage
information, see Cisco Firepower Threat Defense Command Reference at http://www.cisco.com/c/en/
us/td/docs/security/firepower/command_ref/b_Command_Reference_for_Firepower_Threat_Defense.html.
• You can create local user accounts that can log into the CLI using the configure user add command.
However, these users can log into the CLI only. They cannot log into the FDM web interface.
• You can create user accounts for SSH access in an external server. For information about configuring
external authentication for SSH access, see Configuring External Authorization (AAA) for the FTD CLI
(SSH) Users.
Changing Your Password
You should periodically change your password. The following procedure explains how to change the password
while logged into FDM.
If you are logged into the CLI, you can change your password using the configure password command. You
can change the password for a different CLI user with the configure user password username command.
Note
Before you begin
This procedure applies to local users only. If your user account is defined on an external AAA server, you
must change your password with that server.
Getting Started
10
Getting Started
Changing Your Password