LAN automation fails with "inventory error"

[tom.barat@dimensiondata.com]

Hello,

I am having trouble with using LAN automation to configure a catalyst 9300.

C9300 version is 16.12.2t

DNA version is 1.3.3.4.

The LAN automation status seems to proceed as expected until log "Received Ztp message...". At that point the device should appear in the inventory so i can stop the LAN automation process. Instead, the device appears in the plug-and-play devices.

If the LAN automation is stopped the device is never added to the inventory and becomes unreachable because DNA removes the temporary configuration from the seed device.

If the LAN automation process is not stopped the device eventually goes into "inventory error" state (in LAN auto status).

I found a piece of documentation stating this could be due to a routing issue., but in this case DNA can reach the device while the LAN automation process is ongoing.

The device cannot be claimed from the PnP devices tab after LAN automation is stopped.

Finally, after running the LAN automation several times on the same switch i notice the switch's name is incremented ("switch-1, then switch-2, switch-3...) each time even though the switch is always the same and the LAN automation was never successful on that switch.

Has anyone seen a similar case ? Can I try some things before reaching the TAC ?

Thank you,

Have a nice day,

[willwetherman]

Hi Tom,

I had the same issue which was due to a Cat 9k running the network-essentials license instead of the network-advantage license. The error I received was:

Received Ztd Device Error Message for (Serial Number)

A couple of things to try:

1. Make sure that the Cat 9k doesn’t appear in the DNAC list of Plug and Play devices. Delete if it is present
2. Check that the Cat 9k is running the advantage license. If its running network-essentials, then the enablement of IS-IS will fail which LAN automation uses to establish IP connectivity to the Cat9k’s loopback before adding it to the inventory. Enable the advantage license using conf t command 'license boot level network-advantage addon dna-advantage'
3. Erase the Cat9k back to factory default using the script below
4. When LAN automation is running, check the DHCP bindings on the seed for the VLAN1 IP address allocated to the Cat9k and then make sure that you can ping this from DNAC

Note that it is expected to see the Cat9k under Plug and Play during LAN automation. It will initially appear as unclaimed and then change to planned before it appears as ‘In Progress’ under LAN Automation Status.

enable
erase startup-config
y
!
delete /force vlan.dat
delete /force nvram:*.cer
delete /force flash:pnp*
delete /force nvram:pnp*
!
conf t
!
crypto key zeroize
yes
no crypto pki cert pool
yes
no crypto pki certificate pool
yes
no crypto pki trustpoint pnplabel
yes
no pnp profile pnp-zero-touch
yes
!
end
!
write erase
y
!
reload
no

Hope this helps

Will

[willwetherman]

Also please see the LAN Automation Deployment guide for a list of prereqs etc.

https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/tech_notes/b_dnac_sda_lan_automation_deployment.html#id_121210