C8000v Device template issues

[Afeez]

Hello Community, 

I need help to fix this issue I have been facing for a while now. I am trying to push configuration using the template features on vManage, but I keep getting the error in the attached that says "Device is Offline".

Please note that the vManage in use is 20.6.1, and I am running this lab on EVE-NG.

[Kassandra Hernandez · Accepted solution]

Does the device have Control connections?
that error if for when the device has either no control connections or because control connections are up but the netconf session is down.
On the other hand, seem this is a virtual device, depending on the process followed to bring this up, is a normal label,
if you are using Cloud on ramp, then that is normal,

if not cloud on ramp and instead you are using PNP process then is also normal, and once the device forms control connections it will bring up,

if those last two processes are not the ones followed, then you need to make the device to form control connections first, and then the push of the template will be successful

as reference here I share you a bring up link for c8000v devices https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/cisco-sd-wan-overlay-network-bringup.html#deploy-c8000v-using-cloud-services-provider-portals

[SamuelGLN]

Hi @Afeez 

I had face the same issue during my lab studies. I think that is a kind of EVE-NG simulation limitation. I tried troubleshooting for a while but as my goal wasnt understand the problem, I just reboot the lab and everthing works normally.

Best regards
******* If This Helps, Please Rate *******

[Afeez]

Thank you @SamuelGLN and @Kassandra Hernandez for your contribution. I was able to resolve it. It was an issue with the compatibility. I was using a Cisco SDWAN solution of version 20.6.1, but my C8000V was a version of 17.6.2. I changed the C8000V to 17.6.1a and the issue was fixed.

[Afeez]

I would like humbly to request for a support that requires an urgent attention.

I am working on a lab that requires the extension of SDWAN fabric on EVE-NG to Azure Cloud.

I am stuck between making the WAN edge on the EVE-NG network to form BGP neighbourship with the WAN edge in Azure Cloud.

The vEdges can see the SDWAN controller and routes are exchanged.

[Afeez]

Please see the configuration on my vEdge (C8000V) below.

system
location Ireland
gps-location latitude 52.865196
gps-location longitude -7.979459
system-ip 10.0.0.85
overlay-id 1
site-id 400
port-offset 1
control-session-pps 300
admin-tech-on-failure
sp-organization-name shu-sdwan-proj
organization-name shu-sdwan-proj
port-hop
track-transport
track-default-gateway
console-baud-rate 19200
no on-demand enable
on-demand idle-timeout 10
vbond 172.16.14.108 port 12346
!
service tcp-keepalives-in
service tcp-keepalives-out
no service tcp-small-servers
no service udp-small-servers
hostname C8KV1_ShuSdwanProj
username admin privilege 15 secret 9 $9$3V6L3V6L2VUI2k$ysPnXOdg8RLj9KgMdmfHdSHkdaMmiHzGaUpcqH6pfTo
vrf definition 10
rd 1:10
address-family ipv4
route-target export 65010:10
route-target import 65010:10
exit-address-family
!
address-family ipv6
exit-address-family
!
!
vrf definition Mgmt-intf
rd 1:512
address-family ipv4
route-target export 65010:512
route-target import 65010:512
exit-address-family
!
address-family ipv6
exit-address-family
!
!
ip arp proxy disable
no ip finger
no ip rcmd rcp-enable
no ip rcmd rsh-enable
ip as-path access-list 15 permit _65515_
ip as-path access-list 25 permit .*
no ip dhcp use class
ip name-server 208.67.222.220 208.67.222.222
ip route 0.0.0.0 0.0.0.0 172.16.14.1
ip route vrf 10 10.168.112.68 255.255.255.255 10.168.112.225
ip route vrf 10 10.168.112.69 255.255.255.255 10.168.112.225
ip bootp server
no ip source-route
no ip http server
no ip http secure-server
ip nat settings central-policy
cdp run
interface GigabitEthernet1
description Tunnel1_to_NVA
no shutdown
arp timeout 1200
ip address 172.16.14.185 255.255.255.0
no ip redirects
ip tcp adjust-mss 1350
ip mtu 1500
load-interval 30
mtu 1500
negotiation auto
exit
interface GigabitEthernet2
no shutdown
arp timeout 1200
vrf forwarding 10
ip address dhcp client-id GigabitEthernet2
no ip redirects
ip dhcp client default-router distance 1
ip mtu 1500
load-interval 30
mtu 1500
negotiation auto
exit
interface GigabitEthernet3
description Management Interface
no shutdown
arp timeout 1200
vrf forwarding Mgmt-intf
ip address dhcp client-id GigabitEthernet3
no ip redirects
ip dhcp client default-router distance 1
ip mtu 1500
load-interval 30
mtu 1500
negotiation auto

*Aug 19 16:30:07.993: %DMI-5-AUTH_PASSED: R0/0: dmiauthd: User 'vmanage-admin' authenticated successfully from 10.10.10.1:42124 for netconf over ssh. External groups:exit
interface GigabitEthernet4
no shutdown
exit
interface Tunnel1
no shutdown
ip unnumbered GigabitEthernet1
no ip redirects
ipv6 unnumbered GigabitEthernet1
no ipv6 redirects
tunnel source GigabitEthernet1
tunnel mode sdwan
exit
route-map AZURE_CSR_NVA_ROUTE_POLICY deny 1
match as-path 15
!
route-map AZURE_CSR_NVA_ROUTE_POLICY permit 11
match as-path 25
!
route-map AZURE_CSR_NVA_ROUTE_POLICY deny 65535
!
clock timezone UTC 0 0
logging persistent size 104857600 filesize 10485760
no logging monitor
logging buffered 512000
logging console
aaa authentication login default local
aaa authorization exec default local
aaa server radius dynamic-author
!
router bgp 65010
bgp log-neighbor-changes
address-family ipv4 unicast vrf 10
default-information originate
distance bgp 20 200 20
neighbor 10.168.112.68 remote-as 65515
neighbor 10.168.112.68 activate
neighbor 10.168.112.68 ebgp-multihop 5
neighbor 10.168.112.68 route-map AZURE_CSR_NVA_ROUTE_POLICY out
neighbor 10.168.112.68 send-community both
neighbor 10.168.112.69 remote-as 65515
neighbor 10.168.112.69 activate
neighbor 10.168.112.69 ebgp-multihop 5
neighbor 10.168.112.69 route-map AZURE_CSR_NVA_ROUTE_POLICY out
neighbor 10.168.112.69 send-community both
propagate-aspath
redistribute omp
exit-address-family
!
timers bgp 60 180
!
snmp-server ifindex persist
line aux 0
stopbits 1
!
line con 0
speed 19200
stopbits 1
!
line vty 0 4
transport input ssh
!
line vty 5 80
transport input ssh
!
lldp run
nat64 translation timeout tcp 3600
nat64 translation timeout udp 300
sdwan
interface GigabitEthernet1
tunnel-interface
encapsulation ipsec preference 100 weight 1
no border
color default
no last-resort-circuit
no low-bandwidth-link
no vbond-as-stun-server
vmanage-connection-preference 5
port-hop
carrier default
nat-refresh-interval 5
hello-interval 1000
hello-tolerance 12
allow-service all
allow-service bgp
allow-service dhcp
allow-service dns
allow-service icmp
allow-service sshd
allow-service netconf
allow-service ntp
no allow-service ospf
no allow-service stun
allow-service https
no allow-service snmp
no allow-service bfd
exit
exit
appqoe
no tcpopt enable
no dreopt enable
!
omp
no shutdown
send-path-limit 4
ecmp-limit 4
graceful-restart
no as-dot-notation
timers
holdtime 15
advertisement-interval 1
graceful-restart-timer 120
eor-timer 300
exit
address-family ipv4
advertise bgp
advertise connected
advertise static
!
address-family ipv6
advertise bgp
advertise connected
advertise static
!
!
!
licensing config enable false
licensing config privacy hostname false
licensing config privacy version false
licensing config utility utility-enable false
bfd color lte
hello-interval 1000
no pmtu-discovery
multiplier 1
!
bfd default-dscp 48
bfd app-route multiplier 2
bfd app-route poll-interval 123400
security
ipsec
rekey 86400
replay-window 512
integrity-type ip-udp-esp esp
!
!
sslproxy
no enable
rsa-key-modulus 2048
certificate-lifetime 730
eckey-type P256
ca-tp-label PROXY-SIGNING-CA
settings expired-certificate drop
settings untrusted-certificate drop
settings unknown-status drop
settings certificate-revocation-check none
settings unsupported-protocol-versions drop
settings unsupported-cipher-suites drop
settings failure-mode close
settings minimum-tls-ver TLSv1
dual-side optimization enable
!
policy
no app-visibility
no app-visibility-ipv6
no flow-visibility
no flow-visibility-ipv6
no implicit-acl-logging
log-frequency 1000