topic Re: IOS-XR 7.6.x Netconf: Unable to push config with ncclient in Tools

IOS-XR 7.6.x Netconf: Unable to push config with ncclient

bnikhileshwar — Wed, 13 Jul 2022 21:04:00 GMT

I'm try to configure a loopback interface using ncclient but I get the following error message

Error message after executing python script

PS C:\Users\nb303g\Documents\Python Projects\PY\ncclient> python.exe .\main_iosxr_working.py
Traceback (most recent call last):
File "C:\Users\nb303g\Documents\Python Projects\PY\ncclient\main_iosxr_working.py", line 98, in <module>
data = cisco_manager.edit_config ( interfacecfg, target='candidate')
File "C:\Users\nb303g\AppData\Local\Programs\Python\Python310\lib\site-packages\ncclient\manager.py", line 246, in execute
node.append(validated_element(config, ("config", qualify("config"))))
File "C:\Users\nb303g\AppData\Local\Programs\Python\Python310\lib\site-packages\ncclient\xml_.py", line 150, in validated_element
ele = to_ele(x)
File "C:\Users\nb303g\AppData\Local\Programs\Python\Python310\lib\site-packages\ncclient\xml_.py", line 129, in to_ele
return x if etree.iselement(x) else etree.fromstring(x.encode('UTF-8'), parser=_get_parser(huge_tree))
File "src\lxml\etree.pyx", line 3254, in lxml.etree.fromstring
File "src\lxml\parser.pxi", line 1913, in lxml.etree._parseMemoryDocument
File "src\lxml\parser.pxi", line 1800, in lxml.etree._parseDoc
File "src\lxml\parser.pxi", line 1141, in lxml.etree._BaseParser._parseDoc
File "src\lxml\parser.pxi", line 615, in lxml.etree._ParserContext._handleParseResultDoc
File "src\lxml\parser.pxi", line 725, in lxml.etree._handleParseResult
File "src\lxml\parser.pxi", line 654, in lxml.etree._raiseParseError
File "<string>", line 4
lxml.etree.XMLSyntaxError: AttValue: " or ' expected, line 4, column 99

Python Script

from ncclient import manager

host = '135.16.244.171'

cisco_manager = manager.connect (host= host, port=22, username= username password=password, hostkey_verify=False, device_params={'name': 'iosxr'}, timeout = 5000, allow_agent=False, look_for_keys=False)

interfacecfg = """

<edit-config>

<interface-configurations xmlns="http://cisco.com/ns/yang/Cisco-IOS-XR-ifmgr-cfg" xc:operation=”merge”>

<interface-configuration>

<interface-name>Loopback100</interface-name>

<interface-virtual/>

<ipv4-network xmlns="http://cisco.com/ns/yang/Cisco-IOS-XR-ipv4-io-cfg">

</primary>

</addresses>

</ipv4-network>

</interface-configuration>

</interface-configurations>

</config>

</edit-config>

"""

data = cisco_manager.edit_config ( interfacecfg, target='candidate')

print (data)

reply = cisco_manager.commit()

cisco_manager.close_session()

Re: IOS-XR 7.6.x Netconf: Unable to push config with ncclient

bigevilbeard — Thu, 14 Jul 2022 09:53:37 GMT

No sure if this is the same, but take a look at this thread, https://community.cisco.com/t5/other-networking-subjects/attributeerror-rpcreply-object-has-no-attribute-data-ele/m-p/4560220

Re: IOS-XR 7.6.x Netconf: Unable to push config with ncclient

bnikhileshwar — Fri, 15 Jul 2022 16:11:07 GMT

@bigevilbeard

I've downgraded ncclient from 0.6.13 to 0.6.4 but I still get the same error.

PS C:\Users\nb303g\Documents\Python Projects\PY\ncclient> pip show ncclient
Name: ncclient
Version: 0.6.4
Summary: Python library for NETCONF clients
Home-page: https://github.com/ncclient/ncclient

Re: IOS-XR 7.6.x Netconf: Unable to push config with ncclient

bnikhileshwar — Fri, 15 Jul 2022 16:14:38 GMT

I have no problem getting the config from the router but i'm unable to edit the config.

Re: IOS-XR 7.6.x Netconf: Unable to push config with ncclient

Marcel Zehnder — Mon, 18 Jul 2022 08:57:46 GMT

Try to remove the outer most tag (<edit-config>..</edit-config>) from the payload:

interfacecfg = """ <config xmlns:xc="urn:ietf:params:xml:ns:netconf:base:1.0"> <interface-configurations xmlns="http://cisco.com/ns/yang/Cisco-IOS-XR-ifmgr-cfg" xc:operation=”merge”> <interface-configuration> <interface-name>Loopback100</interface-name> <interface-virtual/> <ipv4-network xmlns="http://cisco.com/ns/yang/Cisco-IOS-XR-ipv4-io-cfg"> <addresses> <primary> <address>10.99.1.99</address> <netmask>255.255.255.255</netmask> </primary> </addresses> </ipv4-network> </interface-configuration> </interface-configurations> </config> """

HTH
Marcel

Re: IOS-XR 7.6.x Netconf: Unable to push config with ncclient

bnikhileshwar — Mon, 18 Jul 2022 14:52:57 GMT

@Marcel Zehnder Removing the outer tags didn't make any difference. I still got the error

lxml.etree.XMLSyntaxError: AttValue: " or ' expected, line 4, column 99

Re: IOS-XR 7.6.x Netconf: Unable to push config with ncclient

Nabsch — Fri, 29 Jul 2022 20:02:47 GMT

Hello,

You get this issue because your aren't using normal quote in operation merge. I get the same issue by using your payload. I changed it and now i didn't get the error.

interfacecfg = """ <config xmlns:xc="urn:ietf:params:xml:ns:netconf:base:1.0"> <interface-configurations xmlns="http://cisco.com/ns/yang/Cisco-IOS-XR-ifmgr-cfg" xc:operation="merge"> <interface-configuration> <interface-name>Loopback100</interface-name> <interface-virtual/> <ipv4-network xmlns="http://cisco.com/ns/yang/Cisco-IOS-XR-ipv4-io-cfg"> <addresses> <primary> <address>10.99.1.99</address> <netmask>255.255.255.255</netmask> </primary> </addresses> </ipv4-network> </interface-configuration> </interface-configurations> </config> """

You can also check your payload using a text edit nano/vi/vim and you will see that's quote are missing .

Here a screenshot

Re: IOS-XR 7.6.x Netconf: Unable to push config with ncclient

bnikhileshwar — Fri, 29 Jul 2022 18:27:36 GMT

The solution you have suggested kinda worked. After editing the payload as per your suggestion, I'm no longer getting the old error "lxml.etree.XMLSyntaxError: AttValue: " or ' expected, line 4, column 99" but it's still not working for me. This time I get another error "ncclient.operations.rpc.RPCError: edit-config". May I know the ncclient and cisco NOS versions that you are using.?

Payload:-

interfacecfg = """

<interface-configurations xmlns="http://cisco.com/ns/yang/Cisco-IOS-XR-ifmgr-cfg" xc:operation="merge">

<interface-configuration>

<interface-name>Loopback99</interface-name>

<interface-virtual/>

<ipv4-network xmlns="http://cisco.com/ns/yang/Cisco-IOS-XR-ipv4-io-cfg">

</primary>

</addresses>

</ipv4-network>

</interface-configuration>

</interface-configurations>

</config>

"""

Re: IOS-XR 7.6.x Netconf: Unable to push config with ncclient

Nabsch — Fri, 29 Jul 2022 20:03:10 GMT

Can you share the traceback ?

Re: IOS-XR 7.6.x Netconf: Unable to push config with ncclient

bnikhileshwar — Fri, 29 Jul 2022 20:24:56 GMT

I have attached tracebacks

Re: IOS-XR 7.6.x Netconf: Unable to push config with ncclient

Nabsch — Fri, 29 Jul 2022 21:01:09 GMT

Can you share also the python traceback

Re: IOS-XR 7.6.x Netconf: Unable to push config with ncclient

Nabsch — Fri, 29 Jul 2022 21:12:12 GMT

From your log it's look like that you are facing permission issue.

Jul 27 18:08:56.280 netconf-yfw/nacm.trace 0/RP0/CPU0 t8508 #18876: TRC: yfw_nacm_req_author_enforcement:1421 ctx=0x5576a3f36770,Req <edit-config> is denied (rpc-name)

Can you execute the command

show nacm summary

Here a link that might help you

Re: IOS-XR 7.6.x Netconf: Unable to push config with ncclient

bnikhileshwar — Mon, 01 Aug 2022 14:29:57 GMT

Nabsh,

Really appreciate your help.It worked after enabling nacm and adding one more line to the payload "<active>act</active>"

RP/0/RP0/CPU0:router1#show nacm summary

NACM SUMMARY
--------------------------------------------------------------------------------
Enable Nacm : True
Enable External Groups : True
Number of Groups : 1
Number of Users : 1
Number of Rules : 0
Number of Rulelist : 0
Default Read : permit
Default Write : permit
Default Exec : permit
Denied Operations : 23
Denied Data Writes : 0
Denied Notifications : 0
--------------------------------------------------------------------------------

RP/0/RP0/CPU0:router1#show running-config nacm
nacm group tempnacm
usernames sam123
!
nacm write-default permit

interfacecfg = """

<interface-configurations xmlns="http://cisco.com/ns/yang/Cisco-IOS-XR-ifmgr-cfg" xc:operation="merge">

<interface-configuration>

<interface-name>Loopback99</interface-name>

<interface-virtual/>

<ipv4-network xmlns="http://cisco.com/ns/yang/Cisco-IOS-XR-ipv4-io-cfg">

</primary>

</addresses>

</ipv4-network>

</interface-configuration>

</interface-configurations>

</config>

"""