SCP Secure Copy Protocol on NCS 55A2.

[Daniel Smith]

We have a growing environment of NCS 55A2's for our new backbone. We are planning to upgrade the code to 7.1.2. A previous employee left instructions about using SCP to transfer .tar files to the harddisk of the NCS devices. I have been trying this in the lab, to the same FTP server, with no no success. I get the login banner from the FTP server, put in a known good password (works from a non NCS device), but get the following:

RP/0/RP0/CPU0:FTWLAB-P1#scp ftpuser@10.48.7.159:/ncs5500/test.txt harddisk: so$
Tue Jan 19 14:55:57.826 EST
Connecting to 10.48.7.159...
Legal Notice

This system is for AUTHORIZED USERS ONLY and only for uses permitted by security policies. By using this system, each user acknowledges and accepts the following:

• All of the user’s activities on the system may be monitored and recorded.
• This system and its contents are owned by AEP.
• Because the system is monitored, users have no expectation of privacy with regard to use of the system.
• Use of the system for personal matters that the user may otherwise consider confidential, such as Attorney/Client communications with the user’s personal attorney, may result in a waiver of confidentiality and the Attorney/Client privilege.
• At any time and for any lawful purpose, AEP may monitor, intercept, record and search any communications or data transiting or stored on this information system, and may disclose such communications or data to the U.S. Government and its authorized representatives.

Any use of the system that violates any Company policy or any law may subject the user to discipline, up to an including termination, by the Company and/or prosecution by law enforcement officials.

Password:
RP/0/RP0/CPU0:2021 Jan 19 14:56:01.251 EST: ssh_xr[69076]: %SECURITY-SSHD-6-INFO_CLIENT_LOGIN : SSH Client successfully established session as ftpuser to 10.48.7.159
scp: 00434: The user VMNALDCAS121\ftpuser does not have any roots specified; the channel is being closed

So I have tested the username/pw combination on an IOS device, but here on an IOSXR device, no luck. Thanks in advance for any suggestions!

[marce1000]

 - It seems that the remote account is currently not correctly  configured : 1) check if the password is not expired 2) Do a normal logon with the intended account, check if that works  3) Check the logs on the remote sftp (ssh-server logs) server , when this is tried.

 M.

[pieterh]

not sure if this applies?

Users created in the System Admin VM are different from the ones created in XR VM. As a result, the username and password of a System Admin VM user cannot be used to access the XR VM, and vice versa.

When the user profile is created for the first time in XR VM, the user name and password are synced to the System Admin VM if no user already exists in System Admin VM.

However, the subsequent password change or user deletion in XR VM for the synced user is not synchronized with the System Admin VM.

Therefore, the passwords in XR VM and System Admin VM may not be the same. Also, the user synced with the System Admin VM will not be deleted if the user is deleted in XR VM