Cisco device models not added to the "Cisco IOS - SSH Capable" Device Family in NCM as expected.

Products

• CA Spectrum
• DX NetOps

Issue/Introduction

We have a number of Cisco models that support SSH. These models are added to the "Cisco IOS" Device Family in NCM but not the "Cisco IOS - SSH Capable" Device Family in NCM as expected.

Environment

Release : Any

Component : Spectrum Applications/NCM

Cause

The following criteria must be met in order for Spectrum to place a model into the "Cisco IOS - SSH Capable" Device Family in NCM:

1 - The firmware version must be greater than 12.2 

2 - If the sysDesc contains string k9 then Spectrum will check for the SSH version. If it is able to SSH to device and read the SSH Version value as >= 2

For this issue, we enabled the NCM debug by doing the following:

- Log into the SpectroSERVER system as the user that owns the Spectrum installation

- Make a backup of the current $SPECROOT/NCM/config.xml file

- Edit the $SPECROOT/NCM/config.xml file and look for the following entry:

<debugging type="java.lang.String">off</debugging>

- Change the above entry to the following:

<debugging type="java.lang.String">max</debugging>

- Save the change

- Kill the running ncmservice process. processd will start a new one

- Log into OneClick

- Find and select the device model

- Right mouse click on the device model and select Reconfiguration -> Reevaluate NCM Device Family from the menu

- When complete, review the $SPECROOT/NCM/logs/debug/debug.log.* file created

For this issue, we saw the following error for the ip address of the device:

Jul 14, 2022 08:22:34.157 (grpc-default-executor-0) - GRPC getSSHMajorVersion for host : XX.XX.XX.XX, on Port : 22 starting
Jul 14, 2022 08:22:35.454 (grpc-default-executor-0) - getSSHMajorVersion for host : XX.XX.XX.XX, on Port : 22 failed, Exception : Connection refused: connect
Jul 14, 2022 08:22:35.454 (grpc-default-executor-0) - GRPC getSSHMajorVersion for host : XX.XX.XX.XX, on Port : 22 failed

To disable the debugging, set the value back to "off" and kill the running ncmservice process.

Resolution

After investigating the configuration, it was found an ACL on the device was preventing the SS from SSH to the device. The ACL was updated on the device to permit Spectrum SSH.

After running Reconfiguration -> Reevaluate NCM Device Family on the device model, the model was placed into the "Cisco IOS - SSH Capable" Device Family in NCM as expected.