cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1576
Views
8
Helpful
3
Replies

Questions about PnP

sw1ft-code
Level 1
Level 1

Hi

We are running APIC-EM in our LAB environment and I have a few pending issues/questions before going into production.

1. Is there a way to get the entire device configuration using the api? including passwords and snmp information etc.

GET /network-device/{networkDeviceId}/config

I'm working on a solution to automate the replacement of a deployed switch (in case of RMA) with PnP. In my opinion the best solution would be to allow the API to create a new PnP project using an existing configuration ID from the Inventory (not possible right now). This way I could provision the replacement switch with the exact same configuration using PnP. The other solution is using the API to download the device configuration and upload it again while creating the PnP project. The problem is that the device configuration is missing all the sensible information like passwords and snmp information.


2. We are using Tacacs on our switches and PnP isn't able to provision a new switch if I don't remove the following statements from the device configuration:

aaa authentication enable default group **** enable

aaa authorization exec default group **** if-authenticated

aaa authorization commands 15 default group **** if-authenticated

Is this problem going to be addressed in the next release?


Thanks

1 Accepted Solution

Accepted Solutions

aradford
Cisco Employee
Cisco Employee

Hi Stefano,

#1) Not today.  This was a deliberate design design due to data confidentiality.  GET API only require OBSERVER role.  Prime Infrastructure solves this with a privileged API call.   We need to address this to implement RMA ourselves.

#2).  The first command is fine, is it the second two that cause the issue.  This requires IOS change, or there is an EEM script you can use (as part of the config file you download to work around).  My blog covers this in detail. Network Automation with Plug and Play (PnP) – Part 7

Adam

View solution in original post

3 Replies 3

aradford
Cisco Employee
Cisco Employee

Hi Stefano,

#1) Not today.  This was a deliberate design design due to data confidentiality.  GET API only require OBSERVER role.  Prime Infrastructure solves this with a privileged API call.   We need to address this to implement RMA ourselves.

#2).  The first command is fine, is it the second two that cause the issue.  This requires IOS change, or there is an EEM script you can use (as part of the config file you download to work around).  My blog covers this in detail. Network Automation with Plug and Play (PnP) – Part 7

Adam

Hi Adam

In that case I will use the Prime API as a workaround to solve my RMA problem.

Thank you for the suggestion about EEM. 

By the way your blog posts are very helpful!

Thanks Franco,

let us know if you have other questions.

Adam

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:


This community is intended for developer topics around Data Center technology and products. If you are looking for a non-developer topic about Data Center, you might find additional information in the Data Center and Cloud community