cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3100
Views
0
Helpful
7
Replies

From DNA change atomoatically local user in switches

 I need to change the local admin psw in several swtiches, how can I do it from DNA automatically?

7 Replies 7

balaji.bandi
Hall of Fame
Hall of Fame

i would do this out of the box with the script, and use DNAC may not be right i gues here.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Mike.Cifelli
VIP Alumni
VIP Alumni

Here is a high-level overview of steps taken to modify the global & local DNAC user/pass/enable:

Change global username pass in ise
Change global username/pass in dnac device creds
Assign global dnac creds -- to all inventory (let sync)
Reprov via temp editor -- to change enable pw
*all devices in inventory will show enable error under manageability
After re-prov'ing all devices:: change dnac enable in ise; change enable in dnac network creds
Test resync of all devices -- all devices should now be fully managed in DNAC inventory

 

See attached for more detail.  HTH & good luck!

@Mike.Cifelli  i may be wrong, that is to provisioning the device intially required local password, so though template we can overide local username and passwords ?

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Mike.Cifelli
VIP Alumni
VIP Alumni

@balaji.bandi Apologies for any confusion.  My overview/example shared was the procedures I have used in the past to update DNAC global creds + local fabric device creds on an existing deployment.

Fare Enough, trying to understand learn here, if something we missing here.  so using template we can overwride  basic config of the switch.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Mike.Cifelli
VIP Alumni
VIP Alumni

 so using template we can overwride  basic config of the switch.

-Yes in the scenario shared/mentioned you would be managing already provisioned fabric devices via the global credentials and not local.  Therefore you could use templates to reconfigure local creds via ssh+global creds pending proper config/communication with radius server.  The doc I shared goes through step by step.  Note that the last item changed is the global enable pw since it must first be changed locally on each device.  Changing the global enable out of order will create login/management issues.  HTH!

Cheers for sharing your thoughts and appricaited for the clarification.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: