Using Postman to test API calls to NSO.  http://nso-server:8080/restconf/data/tailf-ncs:devices/device=leaf1/config/tailf-ned-cisco-ios-xr:interface/"TenGigE=0/0/0/6" Returns  { "tailf-ned-cisco-ios-xr:TenGigE": { "id": "0/0/0/6", "description": "<<Ignore - WiP >>", "shutdown": [ null ] } } I would like to update the interface description and no-shut the interface in a single call. Tried with this but no success: { "description": "<<Ignore - WiP >>", "shutdown": "true" } Also tried without the xml payload with the below after reading that a delete operation is what's needed, but I must have missed something http://nso:8080/restconf/data/tailf-ncs:devices/device=leaf1/config/tailf-ned-cisco-ios-xr:interface/"TenGigE=0/0/0/6"/shutdown/tags="delete"/ { "errors": { "error": [ { "error-message": "uri keypath not found", "error-tag": "invalid-value", "error-type": "application" } ] } }   Anyone have any ideas on how I can accomplish this? Thank you in advance. ... View more

I need to remove one of the tacacs-server hosts from our devices but am getting the above error when I try.   Current config   aaa group server tacacs+ test   server 1.1.1.1   server 1.1.1.2 aaa authentication login default group test aaa authentication login console local aaa authorization commands default group test   Desired config: as above, but replace server 1.1.1.2 with 1.1.1.3   Steps to reproduce error: host# conf t host(config)# aaa group server tacacs+ test host(config-tacacs+)# no tacacs-server host 1.1.1.2  {I have also tried with no server 1.1.1.2}  server either belongs to group in use or default group configuration for 1.1.1.2 could not be removed   Is there a way to get around this or is the only choice to remove AAA (which I'd rather not do and risk getting locked out)? thanks in advance. This is on a Nexus 5500 series, I have several devices which could be running 5.*, 6.* or 7.* ... View more

Does anyone have hardware/vm specs for installing NSO on laptop for development. I.e. not in production. thanks ... View more

Does anyone know of tools that can confirm/deny if a network device is vulnerable to a particular alert based on configuration? I.e. It's a simple matter to parse a listing of vulnerability notifications and then determine if there is a match between an affected version of software and a device on the network. Confirming if the feature implicated in the notification is actually present and enabled on the device is manual and error prone process and I'm looking to find out if there are products that address this issue. thank you in advance ... View more