Security Switch Module (SSM)

Problem Blue LED on the SSM

Cause SSM is not properly assembled

Resolution

1. Reseat the SSM
2. If SSM cannot be attached due to broken latch - RMA

Validation Verify the Blue LED on the SSM turned off

Problem asg dxl dist_mode verify failed and there are traffic issues on pseudo interfaces

Cause SSM distribution configuration is not set properly

Resolution

1. reset distribution mode and verify it
2. In case it didn't solve, login into the appropriate SSM and invoke load-balance apply
3. As a last resort, invoke system reload manufacturing-defaults

Validation Run asg dxl dist_mode verify

Problem Connectivity issues between SGMs

Cause Invalid SSM configuration on Sync interfaces

Resolution Login into the appropriate SSM and run system reload manufacturing-defaults

Validation Verify connectivity between the SGMs by invoking asg monitor

Problem Connectivity issues between SGMs on different Chassis

Cause Sync ports are connected through 1G link/transceivers are not compatible with distance

Resolution:

Connect the Sync ports to 10G links, using LC fiber optic. Make sure to use SR/LR transceivers, according to distance

Validation Verify connectivity between SGMs on different Chassis by invoking asg monitor

Problem No link on SSM traffic port

Cause Uncertified transceivers or incorrect port speed

Resolution:

1. Check if the transceivers are certified by invoking the command asg diag verify and check whether the "Media Details" Passed
2. Run asg_chassis_ctrl get_port_admin_speed <ssm_id> <port_id> to verify the fan speed
3. If necessary, run asg_chassis_ctrl set_port_speed <ssm_id> <port_id> <speed>

Validation Verify link on the port and connectivity (if possible)

Problem No link on SSM management port

Cause Uncertified transceivers or incorrect port speed

Resolution:

1. Check if the transceivers are certified by connecting them to one of the traffic ports and invoke transceiver_verifier
2. Verify the port speed
3. login to the relevant SSM
4. Run show port 1/5/<management port index, 1-4>
5. Reset port speed
6. login to the relevant SSM
7. Enter conf t
8. Set port speed to different value:

   port 1/5/<management port index> speed 100

9. Set port speed back to the desired value:
   port 1/5/<management port index> speed 1000

Validation Verify link on the port and connectivity (if possible)

Problem Silent installation on other SGMs does not work after FTW finished

Cause SSM version is incorrect or has an invalid configuration

Resolution

1. Login into the appropriate SSM and verify version by invoking show version
2. In case the version is incorrect, please upgrade the SSM
3. Otherwise, run system reload manufacturing-defaults

Validation Verify that silent installation on other SGMs completed after 5-10 minutes