Spectrum is sending SSH packets to our devices on SS restart and OnlineBackups

book

Article ID: 127174

calendar_today

Updated On:

Products

CA Spectrum

Issue/Introduction

When Online Backup or an SS restart is performed it is noted on firewall logs and ACL logs that SSH packets are being sent to devices.

Cause

Noted here is why these packets are sent:

https://ca-broadcom.wolkenservicedesk.com/external/article?articleId=52194

Environment

Release:
Component: SPCCSS

Resolution

If NCM is not used in Spectrum, we can disable the NCMService which will stop these packets.

1. Navigate to $SPECROOT/lib/SDPM/partslist/
2. Open NCMSERV.idb in a text editor
3. Change:

AUTORESTART;y;
AUTOBOOTSTART;y;

To:

AUTORESTART;n;
AUTOBOOTSTART;n;

4. Save the file.
5. Restart the Spectrum Process Daemon

NCMService will no longer start and thus these packets will not be sent.
Please note that NCM will no longer work once this is done.

Reverse the process if you would like NCM to be enabled again.