08-12-2016 02:33 PM - edited 03-03-2019 08:19 AM
Greetings,
I am new to Prime and am not finding a way to remove a user from all network devices consistently. After a few devices are updated, Prime will time out, saying "connection timed out while executing a command".
Thank you,
Joe
08-13-2016 03:00 PM
Have you verified your credentials (the ones that Prime uses) for all target devices?
Are you using a cli template? You should be able to do the task quite easily with that method.
Just make a cli template that executes the relevant command and saves the newly modified configuration. (Note cli templates always run in config mode.):
no username <user to be removed>
do copy run start
Build the above template and deploy to your devices.
08-13-2016 03:19 PM
Thank you for the response. A script was made but is not working consistently, it is timing out on some devices. I will troubleshoot and apply this option on Monday. Do you know where I can locate more specific scripting details for Prime? Scripting documentation is not as plentiful as Python for example.
08-14-2016 07:42 AM
Documentation has been sadly lacking for Prime Infrastructure.
The cli templates themselves simply use the IOS (or NX-OS) commands available on the target devices. So you can refer to the product configuration guides and command references for that aspect.
As far as your timeout issue, you can adjust the timeout for devices but generally the defaults should be ok. You might select a single problematic device and capture the traffic from Prime while trying a deployment to make sure your syntax and credentials are all ok.
08-25-2016 01:27 PM
I will keep digging into it. The recommended commands did not work, they needed more interactive commands. I appreciate the note about capturing Prime traffic. Are you using Wireshark to monitor Prime traffic?
08-25-2016 01:34 PM
Re monitoring - Prime Infrastructure lets you kick off a tcpdump and download the resultant pcap file.
I do use Wireshark's GUI to analyze that capture file. Note you will have to flip a device to telnet (vs. ssh) in order to get the raw commands in plain text.
I'm not quite hardcore enough to glance through the raw frames to troubleshoot anything more complicated than 3-way handshake failure. :)
10-16-2018 10:27 AM
The problem with using:
no username [username] is that the CLI then requires confirmation that you in fact want to delete the account. Therefore the Prime deploy stalls out waiting.
10-16-2018 10:04 AM
Hi;
Did you ever find a solution for this problem? I am having the same situation in my environment.
Thanks!~
10-16-2018 11:07 AM
For anyone looking for the solution for removing a username form a device(s) via Prime, I finally found it:
<MLTCMD>
no username [username]
y
</MLTCMD>
05-13-2019 06:05 AM - edited 05-13-2019 06:34 AM
Just Done this on a lot of devices from Cisco Prime 3.5 and it worked like a charm, Enter the Multi-Line Commands (MLTCMD) below to Prime without " "
"<MLTCMD>
no username Test1
y
no usernameTest2
y
no usernameTest3
y
</MLTCMD>"
Select "ignore failure and continue" so that if a username is not on some device, the job will continue to run.
I have included screenshots.
05-13-2019 06:07 AM - edited 05-13-2019 06:29 AM
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: