SSH Stops after 2 weeks

[ben_middleton_d]

We have multiple ICX 7750 and 7450 in our DCs. Randomly we get SSH failing after approx 2 to 4 weeks. To fix we have to go to DC and console onto device and apply crypto zeroise then crypto generate CLI commands. This is impacting and time consuming. Any ideas why it is doing this? Code version is 8.0.40 and IP SSH idle-time has also been set to 10 mins but still the issue occurs?

Many thanks Ben

[william_hadley_]

A few things: When did this start happening? how long have the switches been up? Does the monitoring tool close the ssh sessions properly? There is a limit of 5 active sessions unless you modify system parameters. Does it still happen after a reload of the switch?

[netwizz]

Okay, so the strange thing is we actually have Solar Winds Orion sending SSH requests often doing things like backing up configurations, yet we have not experienced this problem.

I suspect if you set both the ssh idletime and time-out that it should fix this though almost certainly there is already a default value, and you probably already set both of these settings being you have been working on it.  Most likley this is a bug in your specific code.

Do all of your switches run the same code version?  Do all of your switches have the same problem?  If yes or no, is there a correlation to which ones exhibit the problem and their version of the FastIron, Iron Ware codebase?

[jijo_panangat]

You can run 'show who' to see the the number of active ssh sessions on the switch in problem state and 
'kill ssh '  This is to forcefully kill an existing ssh session and make room for new connection.

[abdulrazaq_al_m]

I restarted the switches but still same isues

[jijo_panangat]

Hi Ben,

FI 08.0.40 is an older release and prone to some known issues, We would request to upgrade the switches to FI 08.0.90h which is the target path release for ICX 7450 & 7750 platforms and considered to be very stable. This also includes some enhancement in the ssh code.