credentials

[hkupper]

Hello,

can cisco works LMS use enable secret instead of enable password?

Regards

[Joe Clarke]

Yes.  If the device is configured to use enable secret, then that is the credential you will need to enter into DCR for the enable password.

[hkupper]

I've set the credentials in both the devices and lms but config collectin fails for all devices.

[Joe Clarke]

What error do you see when trying to archive the config?  Have you confirmed the credentials work from the LMS server itself?  That is, can you telnet/SSH to these devices from the LMS server using the same credentials in DCR?

[hkupper]

Yes, I can SSH to these devices from the LMS server with the same

credentials as in DCR. SCP is enabled at the devices too.

The error message in DCR:

Execution Result:

CM0062 Polling swOBS315 for changes to configuration.

CM0149 PRIMARY STARTUP config changed.

CM0065 No change in PRIMARY RUNNING config, config fetch not required

CM00 Polling not supported on VLAN RUNNING config, defaulting to fetch.

STARTUP

CM0151 PRIMARY STARTUP Config fetch failed for swOBS315 Cause:

Failed to fetch config using

SCP.com.cisco.nm.lib.cmdsvc.CmdSvcException: Authentication failed

Verify SCP is enabled or not.

SSH: Failed to establish SSH connection to 139.14.37.96 - Cause:

Authentication failed on device 3 times.

Action: Check if protocol is supported by device and required device

package is installed. Check device credentials. Increase timeout value,

if required.

[Joe Clarke]

This error typically indicates that the first level of authentication failed.  Go to Common Services > Device and Credentials > Device Management, and export the DCR attributes for this device (include the credentials).  Verify the username and password are correct.

[hkupper]

How can I do this in LMS 4.0?

[hkupper]

Ok, I found it :-)

The export showed the credentials not for all devices. I had to select "add/import/manage devices" - "all devices" - "edit credentials" then select my credential set and "overwrite all device credentials" then edit all credentials again. Now the configs will be fetched.

Why do I had to do the steps above? I had defined my credentials as default credentials in "admin - device credential settings " after installing LMS 4.0.

Many thanks to Joseph Clarke!

Best regards

Hubert

[Joe Clarke · Accepted solution]

Default credentials are only applied when a device is added.  If you create a credential set after the fact, you have to go to the Edit Credentials interface to apply it to devices already in DCR.

[hkupper]

Ok, I will remember this for future. Many thanks again!