LMS 3.2 doesn't terminated SSH sessions on ACE

[ROMAN TOMASEK]

Hi all,

the customer has a problem with LMS 3.2. This software doesn't terminate ssh sessions created by LMS on ACE. All ssh sessions still exist on ACE, so no new  ssh session can be created until the administrator manually clear these session on ACE. Thank you for your advice.

Roman

[Gaganjeet Chug]

Hi,

This could be device side bug as there is no such bug for LMS 3.2 , although some bug had been identified for the ssh connectivity issue which all are fixed in the LMS 3.2.1 which is service pack of LMS 3.2.

CSCth84178  Data retrieved from a device example device configurations is truncated when CiscoWorks Resource Manager Essentials archives large device configurations using SSH.

CSCtd52217  SSH2 connectivity fails. The reason for the failure being invalid signature error with cmdsvc.

CSCth47018  Device Credential Verification Job hangs when testing SSH.

CSCth81713  Device Credential Verification uses Secondary Credentials for SSH Enable test.

CSCte95623  Support for config archive using SSH2 in IOS-XR devices is not provided.

CSCtg43962  Configuration Management operations such as configuration fetch or netconfig deployment fail to complete. Trying to perform additional operations after this failure do not work. Only after ConfigMgmtServer is restarted do certain configuration management operations work again

Many Thanks,

Gaganjeet

[ROMAN TOMASEK]

Hi Gaganjeet,

thank you very much for your reply. But I think, that this problem is with LMS, because I used some manually created SSH sessions on ACE an these sessions was terminated correctly. I'm sending you the output from one ACE module:

ace1/Admin# sho ssh session-info

Session ID     Remote Host         Active Time        

789            10.210.40.41:24389   280: 2:14          

3946           10.210.40.41:37910   160:47:13          

7394           10.210.40.41:46981   256:46:54          

11129          10.210.40.41:11010   136:46:43          

11651          10.210.40.41:11295   136:40:53          

14651          10.210.40.41:20522   232:46:45          

15143          10.210.40.41:20759   232:42:26          

18317          10.210.40.41:32636   112:47: 5          

19061          10.210.40.41:35109   112: 2:25          

19152          10.210.40.41:35240   112: 0:20          

21886          10.210.40.41:42629   208:47: 1          

22383          10.210.40.41:42839   208:43:14          

25713          10.210.40.41:7305    88:47: 4           

28996          10.210.40.41:48379   400:47: 8          

29105          10.210.40.41:16016   184:47:16          

29579          10.210.40.41:16193   184:44:15         

You can see that there are a lot of ssh sessions from LMS (10.210.40.41) with the long active time.:-(

Best regards

Roman

[KAROLY KOHEGYI]

Hi,

We have same problem with ACE and RME.

Hvae you found any solution for this problem??

Regards,

[ROMAN TOMASEK]

Hi Karoly,

The problem was with the Archive Poller. I increased the fetch interval from 180s to 240s ((RME-Admin-Config Management- Fetch Interval) and the problem was solved:-)

Roman

[KAROLY KOHEGYI]

VERY THANKS!

[KAROLY KOHEGYI]

Hi!

It is not solved my problem!

Session ID     Remote Host         Active Time        

30058          10.42.10.227:49171    0:16:59      

[ROMAN TOMASEK]

Hi,

as I wrote before my problem was caused by Archive Poller. So my problem was solved by fetch interval.

You have to find the cause of this problem in LMS (maybe some software poller, ip sla...). I'm not the LMS expert, but I checked the scheduled time for different pollers and when I found the correct time - I troubleshoot the possible problem.

Roman