Open Frames Download Complete PDF Send Feedback Print This Page

Previous

Next

SSM160 CLI

The SSM (Security Switch Module) is the networking module of the gateway. The SSM transmits traffic to and from the SGM and performs the load distribution among the SGMs.

The SSM includes two modules:

  • Fabric switch - includes the Data ports
  • Base switch - includes the Management ports

Usually the SSM communicates with the SGM through SNMP. Sometimes you can need to connect directly to the SSM.

Configuration

You can connect to the SSM CLI:

  • With a serial console to the CLI port on the SSM front panel (baud rate 9600).
  • From one of the SGMs with SSH.

    You can get the SSM IPs in clish/gclish:

    • show Chassis id 1|2|all module SSM{1|2} ip
    • The password for the SSM is admin.

To see the current configuration:

Run:

# show running-config [<feature_name>]

Because the full configuration is very long, we recommended that you specify the feature that you are interested in. For example, run show running-config load-balance to see the Load Balance configuration. Press tab to see a full list of the features.

To see the current port status:

Run:

# show port

To see detailed port information (speed, administrative state, link state, etc.):

Run:

# show port <port_id>

To see interface statistics:

# show port <port_id> statistics

Example

# show port 1/3/1 statistics

Output

===============================================================================
 Port Statistics
===============================================================================
                                                  Input                 Output
-------------------------------------------------------------------------------
Unicast Packets                                    5003                   7106
Multicast Packets                                568409                   1880
Broadcast Packets                                122151                   1972
Flow Control                                          0                      0
Discards                                             16                      0
Errors                                                0                      0
--------------------------------------------------------------------------------
Total                                            695563                  10958
===============================================================================

===============================================================================
 Ethernet Statistics in Packets
===============================================================================
RX CRC Errors                     0         TX Collisions                    0
RX Undersize                      0
-------------------------------------------------------------------------------
                                                  Input                 Output
-------------------------------------------------------------------------------
Fragments                                             0                      0
Oversize                                              0                      0
Jabbers                                               0                      0
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Packets                                                       Input and Output
-------------------------------------------------------------------------------
Octets                                                                71085491
Packets                                                                 706521
Packets of 64 Octets                                                      2290
Packets of 65 to 127 Octets                                             689951
Packets of 128 to 255 Octets                                              4122
Packets of 256 to 511 Octets                                              6009
Packets of 512 to 1023 Octets                                              258
Packets of 1024 to 1518 Octets                                             994
Packets of 1519 or more Octets                                               0
--------------------------------------------------------------------------------
Total                                            695563                  10958
===============================================================================

===============================================================================
 Rates in Bytes per Second
===============================================================================
                                                  Input                 Output
Rate for last 10 sec                               1477                     25
Rate for last 60 sec                               1435                     50                                                 
===============================================================================

Pay special intention to "Discards" and "Errors" fields which might show a problem if they constantly increase.

To view the SSM logs:

Run:

# unhide private

The default password is: private

# show private shell
# tail /var/log/messages

To change the load distribution on SGM groups:

Run:

# configure terminal
(config)# load-balance mtx-bucket 1 buckets [<SGM_ID1><SGM_ID2>:<SGM_ID3><SGM_ID4>…]
(config)# commit
(config)# exit
#load-balance apply

Note - You need to provide a full list of the SGMs when you use this command. Otherwise, traffic might be dropped on the SSM.

To set port modes for 40G ports (4X10G or 1X40G):

  1. Run:

    # unhide private

    The default password is: private

  2. Run:

    # show private shell

  3. To set 1X40G mode, run:

    # /batm/binux/bin/ub_util -s ahub4_40G yes

  4. To set 4X10G mode, run:

    # /batm/binux/bin/ub_util -s ahub4_40G

    # exit

    # config terminal

    (config)# system reload

    Note - This procedure requires you to reload the SSM. It is recommended that you do one SSM at a time.

To see the current version information:

Run:

# show version

To log out from current session:

Run:

# logout

To change the SSM160 admin password:

  1. Log in using SSH or a serial console to an SGM on the Chassis.
  2. In Expert mode, log in to one of the SSMs in the Chassis:

    ssh admin@ssm<ssm_id>

  3. Enter admin password when prompted.
  4. Run these commands:

    # conf t

    # system security user admin

    # password

  5. Enter the new password.
  6. Run these commands:

    # commit

    # end

    # logout

Notes

  • This procedure should be done separately on each SSM in the system.
  • This procedure does not cause any traffic interruption.

Example

# ssh ssm2
admin@ssm2's password:
BATM T-HUB4
admin connected from 198.51.100.215 using ssh on T-HUB4
T-HUB4#conf t    
Entering configuration mode terminal
T-HUB4(config)#system security user admin
T-HUB4(config-user-admin)#password
(<MD5 digest string>): *****
T-HUB4(config-user-admin)#commit
Commit complete.
T-HUB4(config-user-admin)#end
T-HUB4#log
Connection to ssm2 closed.

Each port ID on the SGM maps to a port on the SSM. The table below maps SSM port IDs to SGM port IDs.

Note - This table relates to SSM1. For SSM2 replace eth1-X with eth2-X.

SGM

SSM

eth1-01

1/3/1

eth1-02

1/3/2

eth1-03

1/3/3

eth1-04

1/3/4

eth1-05

1/3/5

eth1-06

1/3/6

eth1-07

1/3/7

eth1-Sync

1/3/8

eth1-09

1/1/1

eth1-10

1/1/2

eth1-11

1/1/3

eth1-12

1/1/4

eth1-13

1/1/5

eth1-14

1/1/6

eth1-15

1/1/7

eth1-16

1/1/8

eth1-Mgmt1

1/5/1

eth1-Mgmt2

1/5/2

eth1-Mgmt3

1/5/3

eth1-Mgmt4

1/5/4

Verification

To make sure that you have connectivity to the SSMs from the SGMs, ping all the SSM modules IPs.

You can also make sure that SNMP connectivity is available:

> asg_chassis_ctrl get_ssm_firmware all
 
Top of Page ©2014 Check Point Software Technologies Ltd. All rights reserved. Download Complete PDF Send Feedback Print