cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2784
Views
2
Helpful
4
Replies

PnP Remote Software Repository

thjonson
Cisco Employee
Cisco Employee

Is there a way to specify a remote server or switch for a new device to download the software image from instead of it always being downloaded from the APIC?  This would be similar to Remote Staging in LMS 4.2.

As an example, a 3650/3850 IOS-XE image is almost 300MB.  A branch site may have several dozen switches that would need to be provisioned and downloading the same image over the WAN seems inefficient, especially for smaller circuit sizes like a T1 or NxT1.

It would be great to either be able to leverage the ISR at the site as a repository, or even leverage the first 3650 to be upgraded to serve the image to the rest of the switches.

Thanks,

Tom

1 Accepted Solution

Accepted Solutions

Joe Clarke
Cisco Employee
Cisco Employee

Yes!  This is called the remote TFTP server for config and images when you create a PnP project.  You'll see a checkbox for it.  Check the box, then fill in the remote details.  I have used this for a bootstrap app of my own, and it works quite well.  This can be any remote TFTP server.  However, no pre-validation is done to make sure the config and image files exist there.

For your branches, you can create specific projects for them that use the desired remote "stage."

View solution in original post

4 Replies 4

Joe Clarke
Cisco Employee
Cisco Employee

Yes!  This is called the remote TFTP server for config and images when you create a PnP project.  You'll see a checkbox for it.  Check the box, then fill in the remote details.  I have used this for a bootstrap app of my own, and it works quite well.  This can be any remote TFTP server.  However, no pre-validation is done to make sure the config and image files exist there.

For your branches, you can create specific projects for them that use the desired remote "stage."

Thanks Joseph, that is great.  I don't suppose there is a way to use HTTPS or SCP instead of TFTP so the config files aren't transmitted in clear text?  As I understand it the config files when sent from the APIC-EM itself are sent via HTTPS.

Thanks again,

Tom

The only remote option is using TFTP.  The impact may be mitigated in branch offices since the transmission won't have to cross "untrusted" networks.  But being able to specify other protocols and credentials would be a nice enhancement.

Joseph, thanks again!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:


This community is intended for developer topics around Data Center technology and products. If you are looking for a non-developer topic about Data Center, you might find additional information in the Data Center and Cloud community