Security Switch Module (SSM)

Problem The blue LED on the SSM is lit.

Cause The SSM is not correctly assembled.

Resolution

1. Reseat the SSM.
2. If SSM cannot be attached due to broken latch - RMA.

Validation Make sure that the blue LED on the SSM is off.

Problem asg dxl dist_mode verify failed and there are traffic issues on pseudo interfaces.

Cause SSM distribution configuration is not set correctly.

Resolution

1. Reset the distribution mode.
2. Make sure the distribution mode is correct.
3. If the distribution mode is not correct, log in into the applicable SSM and run:

   load-balance apply

4. If the distribution mode is still not correct, run:

   system reload manufacturing-defaults

Validation Run: asg dxl dist_mode verify

Problem There are connectivity issues among SGMs.

Cause The SSM configuration on the Sync interfaces is invalid.

Resolution Log in to the applicable SSM and run: system reload manufacturing-defaults

Validation Make sure that there are no connectivity issues among the SGMs: > asg monitor

Problem There are connectivity issues among SGMs on different Chassis.

Cause The sync ports are connected through 1G link/transceivers that are not compatible with the distance between the Chassis.

Resolution: Use LC fiber optic cable to connect the Sync ports to 10G links. Make sure to use SR/LR transceivers, based on the distance.

Validation Make sure that there are no connectivity issues among the SGMs on different Chassis: > asg monitor

Problem There is no link on the SSM traffic port.

Cause Uncertified transceivers are used or an incorrect port speed is set.

Resolution:

1. Make sure transceivers are certified:

   > asg diag verify

   Make sure the Media Details passed.

2. Make sure the fan speed is correct:

   > asg_chassis_ctrl get_port_admin_speed <ssm_id> <port_id>

3. If the fan speed is incorrect, set it correctly:

   > asg_chassis_ctrl set_port_speed <ssm_id> <port_id> <speed>

Validation Make sure there is a link on the port and connectivity is present.

Problem There is no link on the SSM management port.

Cause Uncertified transceivers are used or an incorrect port speed is set.

Resolution:

1. Make sure the transceivers are certified:
   1. Connect them to one of the traffic ports
   2. Run: transceiver_verifier
2. Make sure the port speed is correct.
3. Log in to the relevant SSM.
4. Run:

   show port 1/5/<mgmnt_port_index>

5. Reset the port speed.
6. Log in to the relevant SSM.
7. Run: conf t
8. Set port speed to different value:

   port 1/5/<mgmnt_port_index> speed 100

9. Set port speed back to the desired value:
   port 1/5/<mgmnt_port_index> speed 1000

Validation Make sure there is a link on the port and connectivity is present.

Problem Silent installation on other SGMs does not work after the FTW finished.

Cause The SSM version is incorrect or has an invalid configuration.

Resolution

1. Log in to the appropriate SSM.
2. Make sure the version is correct:

   show version

3. If the version is incorrect, upgrade the SSM.
4. If the version is correct, run: system reload manufacturing-defaults

Validation Make sure that the silent installation on other SGMs completes after 5-10 minutes.