> Source: [sk164034](https://support.checkpoint.com/results/sk/sk164034)

# sk164034 - After SSM password change, the CMD considers the SSM as "down"

| Property | Value |
|----------|-------|
| Solution ID | sk164034 |
| Date Created | 2019-12-19 |
| Last Modified | 2020-01-15 |
| Technical Level | General |
| Products | Scalable Platforms |
| Versions | R82, R81.20 |
| OS | Gaia |
| Platform | 41000 (EOL), 44000, 64000 |

## Symptoms

- * The SSM shows "down" after the user changes the SSM password in the output of 'asg stat'.
* The following logs can be seen in /var/log/messages after the password change on the SGM which has the role of the Chassis monitor for the Chassis in question:

  ```
  
  Dec 10 18:14:02 CH5-SGW-ch02-02 cmd: [monitoring] Failed to communicate with SSM1, run check alive test
  Dec 10 18:14:02 CH5-SGW-ch02-02 cmd: [monitoring] SSM1 check alive test succeeded, retry to communicate
  Dec 10 18:14:06 CH5-SGW-ch02-02 chassis_control: SNMP request for event 5 timed out (state 2)
  Dec 10 18:14:06 CH5-SGW-ch02-02 cmd: [monitoring] SSM1 communication retry failed
  Dec 10 18:14:06 CH5-SGW-ch02-02 cmd: [monitoring] is_ssm_in_mgmtloss_mode: SSM1 not allowed for management loss mode. Feature is disabled.
  Dec 10 18:14:06 CH5-SGW-ch02-02 cmd: [monitoring] get_module_ports_link: SSM1 is going down (SNMP failed) 
  Dec 10 18:14:06 CH5-SGW-ch02-02 cmd: [monitoring] Chassis 2 SSM1 is down, 0 SSM(s) currently active 
  Dec 10 18:14:06 CH5-SGW-ch02-02 cmd: [monitoring] ssm_down: Setting SSM1 ports to Down state. 
  Dec 10 18:14:06 CH5-SGW-ch02-02 cmd: [monitoring] update_fw_mgmt_link_state : Updating FW with new mgmt link state: Chassis2 eth1-Mgmt4 link is DOWN 
  Dec 10 18:14:06 CH5-SGW-ch02-02 kernel: [fw4_0];Global param: set int fwha_ch_set_mgmt_link_state to '0'
  Dec 10 18:14:06 CH5-SGW-ch02-02 cmd: [monitoring] clear_mgmtloss_ssm_info: Cleared mgmt loss info of SSM1 (mgmt loss mask changed from 0x0 to 0x0). 
  Dec 10 18:14:06 CH5-SGW-ch02-02 cmd: [monitoring] get_pf_status: SSMs not available (All SSMs are DOWN or in management loss mode), keeping old values. 
  Dec 10 18:14:06 CH5-SGW-ch02-02 cmd: [monitoring] Chassis 2 all CMMs are down
  Dec 10 18:14:07 CH5-SGW-ch02-02 chassis_control: Chassis control event handler was call for event 19 with invalid parameters
  Dec 10 18:14:07 CH5-SGW-ch02-02 chassis_control: received wrong arguments for event - finishing event (failure)
  Dec 10 18:14:07 CH5-SGW-ch02-02 cmd: [monitoring] Failed to initialize monitor power units status event, keeping old va
  ```

* The uptime of the SSM is not getting reset following the password change.
* The SSM status returns to normal after a few seconds by itself.

## Cause

A periodic mechanism (every 1.5 seconds) checks two things:

1. Whether the SSM is pingable.
2. Gets the link-state using a SNMP request.

If one of these fails, the CMD will consider the SSM as "down".

The *confd* daemon helps managing SNMP requests.

When we change the SSM password, *confd*is disrupted for a few milliseconds.

If the SSM password change occurred before the SNMP request, then the fetched information regarding the link states using the SNMP will not be successful because *confd* was disrupted.

However, the SSM is still functional and the SSM status will return to it's normal state at the next checkup.

## Solution

Enable the **Allow Management Loss feature** (as per [sk145792](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk145792&partition=Advanced&product=Scalable)) before any SSM password change to prevent this behavior from occurring.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content