cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
1227
Views
11
Helpful
17
Replies

C3560cx provisioning from APIC PNP fails

Hi all,

I am having a small issue... When I try to provisioning my C3560CX model running software version

Switch Ports Model                 SW Version        SW Image
------ ----- -----                 ----------        ----------
*1 12WS-C3560CX-8PC-S      15.2(4)E4         C3560CX-UNIVERSALK9-M

I am getting this error:

Received response from pnp agent for message correlatorId: CiscoPnP-1.0-50-370-B44C140-47 but with error code : ZTD_CMD_ERROR Response String: PERMISSION_DENIED:authorization failed

I can see when I google that some are referring to other software version, but also that I could be something with aaa methode.

Here I am using :

aaa authentication login default group TACACS-ISE local

aaa authorization config-commands

aaa authorization exec default group TACACS-ISE local

aaa authorization commands 1 default group TACACS-ISE if-authenticated

aaa authorization commands 15 default group TACACS-ISE if-authenticated

and the group is containing my TACACS servers.

Anybody that has some info on how to fix this??

I have also tried to run the aaa with a EM script like this:

! EEM SCRIPT

!

event manager applet POST_PNP

event timer countdown time 90

action 1.0 cli command "enable"

action 1.1 cli command "config t"

action 2.0 cli command "aaa authorization config-commands"

action 2.1 cli command "aaa authorization commands 1 default group TACACS-ISE if-authenticated"

action 2.2 cli command "aaa authorization commands 15 default group TACACS-ISE if-authenticated"

action 2.3 cli command "no event manager applet POST_PNP"

action 2.4 cli command "end"

action 2.5 cli command "wr mem"

action 3.0 cli command "end"

but that don´t change anything here.

Hope somebody might can give me some direction on this matter.

Frank

17 REPLIES 17

sure.

the configuration file needs to have "end" as the final statement.

That is outside of the EEM script.

e.g.

action 2.8 cli command "end"

action 2.9 cli command "wr mem"

action 3.0 cli command "end"

end

Adam

Ahh that did it... small thing to fix the issue....

Adam thanks for all your support here.

excellent. thanks for letting us know.