Skip to main content
NetApp Knowledge Base

CONTAP-554359: SwitchSSHAccess_Alert on BES-53248 after ONTAP upgrade to 9.16

Views:
8
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
hw
Last Updated:

Issue

After an upgrade to ONTAP 9.16 alerts for SSH access are seen:
Cluster::*> system health alert show
               Node: Node_reporting
           Alert ID: SwitchSSHAccess_Alert
           Resource: Switch1
           Severity: Minor
    Indication Time: Mon Sep 15 14:18:37 2025
           Suppress: false
        Acknowledge: false
     Probable Cause: SSH access to the Ethernet switch failed. ONTAP cannot
                     collect switch logs.
    Possible Effect: Ethernet switch logs are not available, especially via
                     AutoSupport messages for troubleshooting.
Corrective Actions: 1) Ensure that the provided credentials are valid for
                     accessing the switch and that SSH connectivity to the switch is possible from the node running cshmd.
                     2) Confirm that the correct RCF (Remote Configuration
                     File) is configured on the switch.
                     3) If public SSH key authentication is already
                     configured, log in to the Ethernet switch with
                     administrative credentials from an SSH host or serial
                     console to investigate the login failures.
                     4) If issues persist, regenerate the SSH keys within
                     ONTAP and switch and retry the connection.
                     5) To disable log collection, run the "system switch
                     ethernet log disable-collection" command.
                     6) Refer to ONTAP switch health monitor log collection
                     documentation for further guidance.               Node: Node_reporting
           Alert ID: SwitchSSHAccess_Alert
           Resource: Switch2
           Severity: Minor
    Indication Time: Mon Sep 15 13:42:41 2025
           Suppress: false
        Acknowledge: false
     Probable Cause: SSH access to the Ethernet switch failed. ONTAP cannot
                     collect switch logs.
    Possible Effect: Ethernet switch logs are not available, especially via
                     AutoSupport messages for troubleshooting.
Corrective Actions: 1) Ensure that the provided credentials are valid for
                     accessing the switch and that SSH connectivity to the switch is possible from the node running cshmd.
                     2) Confirm that the correct RCF (Remote Configuration
                     File) is configured on the switch.
                     3) If public SSH key authentication is already
                     configured, log in to the Ethernet switch with
                     administrative credentials from an SSH host or serial
                     console to investigate the login failures.
                     4) If issues persist, regenerate the SSH keys within
                     ONTAP and switch and retry the connection.
                     5) To disable log collection, run the "system switch
                     ethernet log disable-collection" command.
                     6) Refer to ONTAP switch health monitor log collection
                     documentation for further guidance.

Switch health shows as degraded:
Cluster::*> system health subsystem show -subsystem switch-health -instance
Subsystem: Switch-Health
Health: degraded
Initialization State: initialized
Number of Outstanding Alerts: 2
Number of Suppressed Alerts: 0
Node: Node_reporting
Subsystem Refresh Interval: 5m

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.