Enabling Netconf on ASR-1001x Platform IOS-XE 17.3.4a

[zachartl]

Hello,

I can't seem to get netconf enabled on this ASR-1001x using the standard netconf-yang command in the config mode. I've attempted the command as well from the exec shell too.

Does anyone have any experience with this?

Thank you,

Terry

[balaji.bandi]

Can you post below output :

config t

!

(config)#netconf ?  ( do you see this option ?)

[zachartl]

Hello BB,

Yes of course. I've been able to execute that command a get a list of options but I'm unable to discern any that enable netconf.

Thank you for responding.

[balaji.bandi]

have you tested from remote client ?

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cns/configuration/xe-16-6/cns-xe-16-6-book/netconf-sshv2.html#d13468e1504a1635

[zachartl]

Hi BB,

I can. It's Cisco DNA that is the catalyst kicking this endeavor off. I wanted to get netconf enabled on the ASR before running a discovery in DNA Center for this device. Netconf does not appear to be enabled within the device, given the artifacts I've so far shared with this forum. Thank you,

Terry

[zachartl]

from the config mode;

csnc-asr1001a(config)#netconf ?
beep use beep for NETCONF session
detailed-error Enable detailed error
format specify the format spec file to use
legacy NETCONF legacy support
lock-time Limit time NETCONF can lock configuration
max-message maximum received message size
max-sessions Limit total number of NETCONF sessions
ssh Use SSH to establish NETCONF session

[Georg Pauwen]

Hello,

I am not sure if the command below is available on the ASR 1001-X ?

--> show platform software yang-management process 

[zachartl]

Hi Georg,

It is. I tried it initially.

csnc-asr1001a#sh platform software yang-management process
confd : Not Running
nesd : Not Running
syncfd : Not Running
ncsshd : Not Running
dmiauthd : Not Running
nginx : Running
ndbmand : Not Running
pubd : Not Running
gnmib : Not Running

Thank you!

[Georg Pauwen]

Hello,

I have looked around some more: do you have AAA enabled ? The processes are not running, that is the first issue. Maybe the document linked below can help...

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/1610/b_1610_programmability_cg/configuring_yang_datamodel.html#id_84436

[zachartl]

Hi Georg,

I do have AAA enabled within the ASR. 

aaa new-model
aaa authentication login default local
aaa authentication enable default none
aaa authorization exec default local
aaa session-id common
snmp-server enable traps aaa_server

Thank you for asking.

Terry