PNP Error

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-09-2017 02:54 PM - edited 03-01-2019 04:38 AM
Hello, I am back trying to find out why my PNP job's in the projects panel of the APIC-EM dashboard are showing this error:
Received response from pnp agent for message correlatorId: CiscoPnP-1.0-34-279-3C1CD910-34 but with error code : ZTD_CMD_ERROR Response String: PERMISSION_DENIED:authorization failed
I have tried it with and without a username and password to the bulk upload file and the configurations/image seems to get deployed to the switch just fine. Adam or anybody else is there a know reason for this error? I have been googling for it but haven't found anything useful yet.
Is it safe to ignore and move on? I am i missing something like a cert? I am using the latest APIC-EM build with basically a base PNP configuration.
The hardware are 3650/3850 switches
Any suggestions or input is welcomed and I am happy to post my results to help the community.
John Palmason
- Labels:
-
APIC

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-09-2017 09:10 PM
I am embarrassed to say that I have posted this error before a few moths back and didn't remember as I got busy with other projects. Adam has answered the question but I wonder why it hasn't been fixed with the new release.
here is the link to the forum post that answers this question:
https://communities.cisco.com/message/228837#228837
John Palmason

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-11-2017 07:49 AM
Hi John,
what version of IOS are you running on the switches?
The fix requires IOS support as well as APIC-EM.
Adam

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-12-2017 06:14 AM
From the PnP release notes:
AAA device credential support. The AAA credentials are passed to the device securely and the password is not logged. This feature allows provisioning a device with a configuration that contains aaa authorization commands. This feature requires software release IOS 15.6(3)M1, IOS XE 16.3.2, or IOS XE 16.4 or later on the device.
