How to detach offline devices from vManage

[Kenneth Goh]

Please advice what can be done to configure my cEdge. My cEdge router is currently unreachable and I am not able to detach it from device template nor can i make changes via CLI. Thanks in advanced.

cEdge-30(config)# no ip route 0.0.0.0 0.0.0.0 10.1.15.13
cEdge-30(config)# commit
Aborted: 'system is-vmanaged': Commit from vManage is in progress. Configuration through the CLI is not allowed.

Device 'grey out', cannot be detach from device template

[Kanan Huseynli]

Hi,

normally, CLI is allowed if you lost connection to vManage, so if really there is no connection, you can do changes in (but will be overridden by vManage when connection is restored). Could you verify via clie with "show sdwan control connections" ?

Also, sometimes deployment/config push stucks, you can check with below API for active tasks of vManage:

https://[vmanage-ip]:8443/dataservice/device/action/status/tasks

See, how to clear stucked tasks:

https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/214660-vmanage-api-call-clearing-stuck-task.html

[Kenneth Goh]

There is no task stuck

[Kanan Huseynli]

Re-check control connection from router. If router really lost connection you can do change in CLI.

share from router:

show sdwan control connections

[iamdheerajdubey · Accepted solution]

Hi,

To switch to CLI mode from vManaged in Cisco vManage, you can follow these steps:

1. Access the vManage dashboard.
2. Navigate to Configuration >> Devices.
3. Select the desired device from the list.
4. At the top of the page, locate the "Change Mode" tab and click on it.
5. Click on the CLI mode option.

If the above steps do not work, an alternative approach is to change the mode through the device's CLI with the assistance of Cisco TAC. Please note that this method requires TAC support. Follow these instructions:

1. Access the device's CLI.
2. Enter the command "unhide viptela_internal". This command will prompt you for a password.
3. Contact Cisco TAC to obtain the required password.
4. Enter the password provided by TAC.
5. Switch to configuration mode by entering the command "config".
6. Execute the command "no system is_vmanaged" to disable the vManaged mode.
7. You are now in CLI mode.

It is important to reach out to Cisco TAC for assistance during the process to ensure a smooth transition. We hope this information is helpful.

Refer: Troubleshooting Commands for Cisco SD-WAN

[Kenneth Goh]

switch to CLI mode from vManaged in Cisco vManage did not work

[iamdheerajdubey · Accepted solution]

Check the alternate approach, till the device is completely de-attached from vManage you won't be able to make any changes. Raise a TAC case ask for "unhide viptela_internal" password set the "system is_vmanaged" flag to no and perform the required action.

[durale1789]

Hi

Is there a way also to remove attached template on vEdge through Cli mode (without vManage). After controllers  migration my vEdges have been detached from their template   but still exist and present in the show system status ! so any config change is locked. Is there an hidden command to remoove the template attachementin cli mode ?

[LeonardoFernandez5618]

Hi

Whenever I get this issue and I am short on time I do the "nuclear" option which is to "invalid" the cert and remove the device from the inventory, then I add the cert again and it will come as CLI mode.

[durale1789]

Hi thanks,

What do you mean by remove the device from the inventory ? do you have to decommission it ?

[LeonardoFernandez5618]

Hi

After having the cert invalid and sending to controller, I go to Configuration -> Devices, Search for the Cert and in the 3 dots select "Delete Wan Edge", after this is should be removed from any template, to then add the cert again.