Spectrum is sending SSH packets to our devices on SS restart and OnlineBackups

Products

• Spectrum

Issue/Introduction

When Online Backup or an SS restart is performed it is noted on firewall logs and ACL logs that SSH packets are being sent to devices.

Environment

Release:
Component: SPCCSS

Cause

Noted here is why these packets are sent:

https://ca-broadcom.wolkenservicedesk.com/external/article?articleId=52194

Resolution

If NCM is not used in Spectrum, we can disable the NCMService which will stop these packets.

1. Navigate to $SPECROOT/lib/SDPM/partslist/
2. Open NCMSERV.idb in a text editor
3. Change:

AUTORESTART;y;
AUTOBOOTSTART;y;

To:

AUTORESTART;n;
AUTOBOOTSTART;n;

4. Save the file.
5. Restart the Spectrum Process Daemon

NCMService will no longer start and thus these packets will not be sent.
Please note that NCM will no longer work once this is done.

Reverse the process if you would like NCM to be enabled again.