I have a 3845 router running Callmanager Express CME version 4.2. I am logging into the gui via the admin account. I can make changes and save them. However, when I go to Adminitration > Save Router Config I get the following error.
"Configuration change failed. Please report the following error: Parser return code failed"
This issue occurs when the user is not present in the AAA database.
In order to resolve this issue, disable AAA authorization of configuration commands using the no aaa authorization config-commands command in the global configuration mode on the Cisco Unified CME. By default, AAA authorization is disabled.
When you log in to the graphical user interface of the Cisco Unified CME as an end user to change the settings on the phone, the system checks for the user credentials in the AAA configuration. If the user credentials are not configured in the AAA configuration, it will not allow you to make the changes. Use the no aaa authorization config-commands command in order to allow only users configured under AAA the permission to make changes to the configuration.
This command presents no real security risks. The device log in remains restricted, so only people that have access to the device are able to log in and make changes. The users of your phone system that have access to the GUI, do not have access to the routers CLI with their credentials, so there is no chance that the configuration might obtain errors by disabling aaa authorization config-commands.
Another alternate solution is to add the user to the AAA database. If you add the user to the AAA database, they can configure Cisco Unified CME through the GUI, and the error message does not appear.
Thanks for the reply. However, we have already removed the command aaa authorization config-commands. I can now make changes to a phone/extension and hit the Change button. This appears to save it to the running-config only. I thought removing the above command would fix this issue completely. Now when I go to Administration > Save Router Config I still get the error you mention below. Any ideas??
You have reached the Cisco Logistics Support Center.. To Check Status of
your RMA, visit Product Returns & Replacements (RMA). Need help? Contact
us by Phone or Email. North Americas Phone: 1800 553 2447 Option 4
Email: firstname.lastname@example.org Europe Phone: +3...
The short answer is that you don't.... That isn't entirely true while at
the same time it kind of is, but for the most part you don't configure
the softkeys. You enable or disable them via TCL. Here is the long
answer. Be sure to read the whole thing or e...
Topology: IP Phone > Switches > Microsoft NPS setup to forward 802.1x
proxy to > ISE 2.1 patch 3 Authentication: EAP-TLS using Cisco MIC SANs
Phone Models 802.1X support? 802.1x flavor Addtl Comment EAP-MD5 EAP-TLS
Cisco 3905 Y Y N Cisco 6911 Y Y N Cisco ...