I am glad you posted this, I am experiencing the same issue, so I did a dump of what the APIC-EM is doing on the router when it spits out this error, it is running the following on the router, I do not see anything in the output from these commands that would indicate a problem:
enable
terminal length 0 ! to hide what it is doing
terminal width 0 ! to hide what it is doing
show ip interface brief
show running-config
show license
show version
show vrf brief ! returns nothing
show crypto pki trustpoint ! returns nothing
show crypto key mypubkey all ! returns a small self signed non exportable key
show running-config | sec crypto ! returns nothing
show running-config
dir
show clock
show run int GigabitEthernet0/1 ! WAN Side interface here
show running | sec class-map match-any business-critical-and-default
show running | sec performance monitor context IWAN-Context
! Then it starts over just like above but apparently looking at the LAN side interface.
show ip interface brief
show running-config
show license
show version
show vrf brief
show crypto pki trustpoint
show crypto key mypubkey all
show running-config | sec crypto
show running-config | section aaa
dir
show clock
show run int GigabitEthernet0/0 ! See it uses short version of command
show running | sec class-map match-any business-critical-and-default
show running | sec performance monitor context IWAN-Context
! here is where it goes different from above, see using full command this time.
show running-config interface GigabitEthernet0/0
show policy-map interface GigabitEthernet0/0 ! nothing returned here
! here it stops, this last command came back with nothing.
THEN it opens a NEW session to the router and runs the following:
enable
terminal length 0
terminal width 0
terminal width 0 ! yes, it did this two times
config t
do write mem ! odd it did this from global config mode, and it changed nothing to warrant this.
exit
! At this point, it shows up failed in the APIC-EM, it does not log off the router.
Later, I am going to delete one of my working sites, then re-add to get a full successful dump. If you get any more information, please let me know what you find.
Possible things that are different for me with this site:
1. The router does not have an internal DNS server to hit while I am trying to add it.
2. Site has an Internet only WAN connection (I have another internet only site, but it had LAN access to the APIC-EM and to internal DNS when it was added).
