Trying to configure IWAN devices in APIC-EM and every time it fails giving me this message:
Failed to add the Device. Inventory service adding device has failed.. Failed to add device x.x.x.x
All the details are correct as we have devices in Prime infrastructure with the same snmp, CLI credentials
a. APIC-EM Version 1.2.0.1594.
b. IOS XE ver is csr1000v-universalk9.03.16.01a.S.155-3.S1a-ext.SPA.bin
c. The MC is CSR1000v and note that this also happens with our Border routers ISR4k.
d. Device was there and inventory was in progress since a week so I have deleted it before posting this question.
Could you try adding the device when the device is not listed under Inventory.Before adding , you could also check by logging to the device ( telnet or ssh ) from APIC-EM Cluster to make sure that you are able to access the device on network.
APIC-EM can reach the devices with no problems. Now have deleted all 3 (MC, 2 BR) from inventory and gone directly to the IWAN HUB site configurations.
Added the 3 devices as per the attached picture and it is loading then I get the following:
Device x.x.x.x detected with partial information. Please verify that the CLI credentials or selected protocol is valid.
Delete the device from inventory UI and try out below.
Step 1 :make sure you have the license (advance enterprise , security-k9) and XE version ( XE 3.16.2 and above )
Step 2 : Make sure the router has these config .
Sample Config on router ::
Config term
username YYYY priv 15 passwd XXXX
snmp-server community public RO
snmp-server community private RW
line vty 0 15
login local
password XXXX
transport input telnet ssh
transport output telnet ssh
Step 3 : Login to APIC-EM Cluster using ssh grapevine@x.x.x.x and then login to the device for verification ( telnet or ssh whichever way you are adding devices ) --- > telnet to BR1 router
XE 3.16.2 is the supported version. It would be good to have the supported version to avoid issues.
Try to login to these devices from APIC-EM cluster
will suggest using 3.16.2 version on the routers. These images are verified. If you face the same issue with XE 3.16.2 , We can dig in more.
completed the IOS XE update on all devices the Master controller (CSR1000v) and the two border routers ISR 4451 to version 3.16.3 as per your recommendations.
- Have tried to add the devices as before in the IWAN wizard but it keeps spinning and then I get the following error.
using Radius for ssh and I have tried to login with that account in the AD and it works with level 15 privilege to the CLI.
After the upgrade on IOS-XE devices, make sure that
Step 1 : Inventory UI deosnt have the Device listed. May be the device is still in inventory dbase with old IOS-XE information.
Pls delete the device from inventory UI
Step 2 : Make sure the router has these config .
Sample Config on router ::
Config term
username YYYY priv 15 passwd XXXX
snmp-server community public RO
snmp-server community private RW
line vty 0 15
login local
password XXXX
transport input telnet ssh
transport output telnet ssh
After step 2 , still you are having issues, then we should collect the logs and i can send it to dev team to take a look.
RCA log file can be collected by ssh to APIC-EM cluster using grapevine user --- > execute RCA from console --> type in the password --- > /tmp/*.gz file will be created.
Here are the steps to collect the log files ::
step 1: Login to your APIC-EM cluster ssh grapevine@x.x.x.x
step 2 : from the console / shell ,type in
rca
password : yyyyy
Step 3: this process will start collecting all the log files.
Step4 : when the Log collection will complete, it should show you a successful mssg and a *.tar.gz file.
Step 5: upload the *.tar.gz file to your ftp or tftp server .
RCA :: collects the log files into a TAR.gz format ( works like a winzip file :: all the log files are compressed and stored in a single file )
Comments
0 comments
Please sign in to leave a comment.