Solved: Re: Need suggestion for PNP solution - Page 2

JPvisltgb · ‎07-12-2017

Hi,

I need some suggestions for PnP solution. I have many branch offices.

Branch office it is simple topology Router Gi0/1 ---> Gi0/49 Switch.

Router is connected to HQ through MPLS network. DHCP server is in the HQ.

So we are planning to start PnP solution using Apic-EM for all network hardware in branch office.

Scenario:

First part:

Empty router is connected to ISP CPE router. CPE router is relaying DHCP requests from router to central DHCP. Router getting DHCP configuration. After that it is connecting to APIC-EM using url pnpserver.domain.com and getting all config.

Second part:

After router succesfully provisioned it become "router-on-stick". It have several subinterfaces with tagged traffic (Management, Users and Phones)

And here we have a problem:

Empty switch which is connected to router by default is trying to get DHCP to Vlan1 but router doesn't have untagged vlan on its link anymore.

We came up with one solution:

We created additional network (and new DHCP scope) for switch deployment. On Branch router on Gi0/1 we configured IP address and ip helper to our DHCP for untagged traffic. So switch can get ip and other config from newly created deployment DHCP scope and then it connects to pnpserver.

In total we are using additional subnet and configuration on router and DHCP server.

So maybe there is more elegant solution for that?

One more question:

After provisioning completed I have many messages in router :

Jul 12 09:47:08.305 CEST: %XML-UPDOWN: pnp-zero-touch XML Interface(101) UP. PID=218

Jul 12 09:47:08.306 CEST: %XML-UPDOWN: pnp-zero-touch XML Interface(101) DOWN(502).

What should be done to remove these messages ?

aradford · ‎07-13-2017

You need the following commands:

! change the PnP profile to use the management VRF

pnp profile network-pnp

transport https ipv4 x.x.x.x port 443 vrf MGMT

! change HTTP request to come from from management interface

ip http client source-interface <interface-name>

I am pretty sure you need to set the source interface as well for the HTTP request initiating from the router. Remember, all PnP connections are initiated from the router.

Adam

JPvisltgb · ‎07-13-2017

I've made changs using these commands.

Seems system crashed.

chunk_diagnose, code = 3

chunk name is MallocLite

current chunk header = 0x7FBF83AB2DA0

data check, ptr = 0x7FBF83AB2DB8

next chunk header = 0x7FBF83AB2DF0

data check, ptr = 0x7FBF83AB2E08

previous chunk header = 0x7FBF83AB2D50

data check, ptr = 0x7FBF83AB2D68

========= Dump chunk = 0x7FBF83AB2DA0 ======================

7FBF83AB2CB8: 7FBF EB8F1DA1 7FBF 83AA79E0 0 0 7FBF FE92A0A0

7FBF83AB2CD8: 0 0 7FBF 831D8B20 7FBF EB88EF40 0 0

7FBF83AB2CF8: 0 0 15A3C78B 1 7FBF EB77E12F 7FBF 83AA79E0

7FBF83AB2D18: 0 0 0 0 0 0 0 3

7FBF83AB2D38: 7FBF 831D8300 9 0 0 0 15A3C78B 1

7FBF83AB2D58: 7FBF EB77E12F 7FBF 83AA79E0 0 0 0 0

7FBF83AB2D78: 0 0 0 3 7FBF 831D8788 9 0

7FBF83AB2D98: 0 0 15A3C78B FFFFFFFF 7FBF EB8F1DA1 7FBF 83AA79E0

7FBF83AB2DB8: EF4321CD 0 7FBF EB8F1DBE B0D0B0D B0D0B0D B0D0B0D B0D0B0D

7FBF83AB2DD8: B0D0B0D B0D0B0D B0D0B0D B0D0B0D B0D0B0D 0 15A3C78B 1

7FBF83AB2DF8: 7FBF EB41B72B 7FBF 83AA79E0 0 0 DADA2012 0

7FBF83AB2E18: 7FBF EB401AF0 7FBF EB400830 7FBF 835796F0 0 0

7FBF83AB2E38: 0 0 15A3C78B 1 7FBF EB65740A 7FBF 83AA79E0

7FBF83AB2E58: 0 0 301F311D 301B0603 5504030C 1473646E 2D6E6574 776F726B

7FBF83AB2E78: 2D696E66 72612D63 61000000 0 0 0 15A3C78B 1

7FBF83AB2E98: 7FBF EB77E12F 7FBF 83AA79E0 0 0 7FBF 83AB08E0

========= Dump chunk_next = 0x7FBF83AB2DF0 ======================

7FBF83AB2CF0: 0 0 0 0 15A3C78B 1 7FBF EB77E12F

7FBF83AB2D10: 7FBF 83AA79E0 0 0 0 0 0 0

7FBF83AB2D30: 0 3 7FBF 831D8300 9 0 0 0

7FBF83AB2D50: 15A3C78B 1 7FBF EB77E12F 7FBF 83AA79E0 0 0

7FBF83AB2D70: 0 0 0 0 0 3 7FBF 831D8788

7FBF83AB2D90: 9 0 0 0 15A3C78B FFFFFFFF 7FBF EB8F1DA1

7FBF83AB2DB0: 7FBF 83AA79E0 EF4321CD 0 7FBF EB8F1DBE B0D0B0D B0D0B0D

7FBF83AB2DD0: B0D0B0D B0D0B0D B0D0B0D B0D0B0D B0D0B0D B0D0B0D B0D0B0D 0

7FBF83AB2DF0: 15A3C78B 1 7FBF EB41B72B 7FBF 83AA79E0 0 0

7FBF83AB2E10: DADA2012 0 7FBF EB401AF0 7FBF EB400830 7FBF 835796F0

7FBF83AB2E30: 0 0 0 0 15A3C78B 1 7FBF EB65740A

7FBF83AB2E50: 7FBF 83AA79E0 0 0 301F311D 301B0603 5504030C 1473646E

7FBF83AB2E70: 2D6E6574 776F726B 2D696E66 72612D63 61000000 0 0 0

7FBF83AB2E90: 15A3C78B 1 7FBF EB77E12F 7FBF 83AA79E0 0 0

7FBF83AB2EB0: 7FBF 83AB08E0 0 0 7FBF 83AB33B0 7FBF 79C7A798

7FBF83AB2ED0: 88 0 0 0 15A3C78B 1 7FBF EB77E12F

========== Dump chunk_previous = 0x7FBF83AB2D50 =====================

7FBF83AB2C50: 9 0 0 0 15A3C78B 1 7FBF EB77E12F

7FBF83AB2C70: 7FBF 83AA79E0 0 0 0 0 0 0

7FBF83AB2C90: 0 3 7FBF 831D7FE0 9 0 0 0

7FBF83AB2CB0: 15A3C78B 1 7FBF EB8F1DA1 7FBF 83AA79E0 0 0

7FBF83AB2CD0: 7FBF FE92A0A0 0 0 7FBF 831D8B20 7FBF EB88EF40

7FBF83AB2CF0: 0 0 0 0 15A3C78B 1 7FBF EB77E12F

7FBF83AB2D10: 7FBF 83AA79E0 0 0 0 0 0 0

7FBF83AB2D30: 0 3 7FBF 831D8300 9 0 0 0

7FBF83AB2D50: 15A3C78B 1 7FBF EB77E12F 7FBF 83AA79E0 0 0

7FBF83AB2D70: 0 0 0 0 0 3 7FBF 831D8788

7FBF83AB2D90: 9 0 0 0 15A3C78B FFFFFFFF 7FBF EB8F1DA1

7FBF83AB2DB0: 7FBF 83AA79E0 EF4321CD 0 7FBF EB8F1DBE B0D0B0D B0D0B0D

7FBF83AB2DD0: B0D0B0D B0D0B0D B0D0B0D B0D0B0D B0D0B0D B0D0B0D B0D0B0D 0

7FBF83AB2DF0: 15A3C78B 1 7FBF EB41B72B 7FBF 83AA79E0 0 0

7FBF83AB2E10: DADA2012 0 7FBF EB401AF0 7FBF EB400830 7FBF 835796F0

7FBF83AB2E30: 0 0 0 0 15A3C78B 1 7FBF EB65740A

============================================

Refcount on freed chunk is non-zero

%Software-forced reload

Frame pointer 0x7FBF83C4ED00, PC = 0x7FBFAB4791A9

-Traceback= 1#e7b171113d9d8fef543d3319f9a4e292 c:7FBFAB448000+311A9 c:7FBFAB448000+32659 :7FBFE1306000+AFFAF5E :7FBFE1306000+9F61399 :7FBFE1306000+9F43AAD :7FBFE1306000+7470804 :7FBFE1306000+7470418 :7FBFE1306000+A0E3EBA :7FBFE1306000+9536984 :7FBFE1306000+A0FABB5 :7FBFE1306000+953C5C9 :7FBFE1306000+A0C988B :7FBFE1306000+A0C94AB

Fastpath Thread backtrace:

-Traceback= 1#e7b171113d9d8fef543d3319f9a4e292 c:7FBFAB448000+BDF12

Auxiliary Thread backtrace:

-Traceback= 1#e7b171113d9d8fef543d3319f9a4e292 pthread:7FBFA569D000+A7C9

RAX = 0000000000000000 RBX = 00007FBF83C4EDB0

RCX = FFFFFFFFFFFFFFFF RDX = 0000000000000006

RSP = 00007FBF83C4ED00 RBP = 00007FBF83C4ED00

RSI = 00000000000067D8 RDI = 00000000000067D8

R8 = 0000000000000080 R9 = 0101010101010101

R10 = 0000000000000008 R11 = 0000000000000206

R12 = 00007FBFE1219160 R13 = 046877E8BF7F0000

R14 = 0000000000000000 R15 = 00007FBF83AA79E0

RFL = 0000000000000206 RIP = 00007FBFAB4791A9

CS = 0033 FS = 0000 GS = 0000

ST0 = 0000 0000000000000000 ST1 = 0000 0000000000000000

ST2 = 0000 0000000000000000 ST3 = 0000 0000000000000000

ST4 = 0000 0000000000000000 ST5 = 0000 0000000000000000

ST6 = 0000 0000000000000000 ST7 = 0000 0000000000000000

X87CW = 037F X87SW = 0000 X87TG = 0000 X87OP = 0000

X87IP = 0000000000000000 X87DP = 0000000000000000

XMM0 = 00000000000000000000000000000000

XMM1 = 00000000000000000000000000000000

XMM2 = 00000000000000000000000000000000

XMM3 = 00000000000000000000000000000000

XMM4 = 00000000000000000000000000000000

XMM5 = 00000000000000000000000000000000

XMM6 = 00000000000000000000000000000000

XMM7 = 00000000000000000000000000000000

XMM8 = 00000000000000000000000000000000

XMM9 = 00000000000000000000000000000000

XMM10 = FFFFFFFF000000000000000000000000

XMM11 = 00000000000000000000000000000A0A

XMM12 = 00000004000000040000000400000004

XMM13 = 0000000E000000090000000E000000D2

XMM14 = 00000000000000000000000000000000

XMM15 = FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

MXCSR = 00001FA0

Writing crashinfo to bootflash:crashinfo_RP_00_00_20170713-135922-CEST

Buffered messages:

Jul 13 13:59:18.970 CEST: %XML-UPDOWN: pnp-zero-touch XML Interface(101) DOWN(502).

Jul 13 13:59:18.970 CEST: %XML-UPDOWN: pnp-zero-touch XML Interface(101) UP. PID=364

Jul 13 13:59:18.973 CEST: %SYS-2-CHUNKBADREFCOUNT: Bad chunk reference count, chunk 7FBF83AA79E0 data 7FBF83AB2DB8 refcount FFFFFFFFFFFFFFFF alloc pc 7FBFEB8F1DA1. -Process= "XEP_pnp-zero-touch", ipl= 0, pid= 364

-Traceback= 1#e7b171113d9d8fef543d3319f9a4e292 :7FBFE1306000+9F61382 :7FBFE1306000+9F43AAD :7FBFE1306000+7470804 :7FBFE1306000+7470418 :7FBFE1306000+A0E3EBA :7FBFE1306000+9536984 :7FBFE1306000+A0FABB5 :7FBFE1306000+953C5C9 :7FBFE1306000+A0C988B :7FBFE1306000+A0C94ABJul 13 14:00:18.664 R0/0: %PMAN-3-PROCHOLDDOWN: The process linux_iosd-image has been helddown (rc 134)

Jul 13 14:00:19.028 R0/0: %PMAN-0-PROCFAILCRIT: A critical process linux_iosd_image has failed (rc 134)

Jul 13 14:00:26.885 R0/0: %PMAN-5-EXITACTION: Process manager is exiting: critical process fault, linux_iosd_image, rp_0_0, rc=134

Initializing Hardware ...

and rebooted

aradford · ‎07-13-2017

That is not good.

can you try without the http command?

JPvisltgb · ‎07-13-2017

I removed ip http client source-interface <interface-name> - System crashed.

Then I removed from pnp profile line vrf MGMT - System crashed.

Removed

pnp profile pnp-zero-touch

transport https ipv4 x.x.x.x port 443

pnp startup-vlan 99

Everything is ok

So seems that IOS don't like pnp profile overwritting.

JPvisltgb · ‎07-31-2017

I found solution.

Apic-em is creating pnp profile - pnp-zero-touch.

So i just added

backup transport https host XXX.XXX.XXX.XXX port 443 vrf VRF-NAME

to that profile.

and it works.

aradford · ‎07-31-2017

awesome, thanks for the update.