You need to create an empty vlan.dat file in the tftpboot directory before you can copy it from the device. This kind of security is typical for TFTP.
However, your problem appears to be the credentials in DCR for this device. This error is typically never wrong. I recommend you start a sniffer trace filtering on telnet traffic to this device, then perform a new Sync Archive. When it fails, look at the sniffer trace to see the error RME encounters (and what credentials it is using to log in to the device).
This should work. You can also go to RME > Config Mgmt > Archive Mgmt > Sync Archive. If you are still not seeing any telnet traffic in the sniffer trace, then I suggest you open a TAC service request so live troubleshooting can be done.
If you're still seeing the permission denied error, you haven't granted full control to everyone for your empty vlan.dat file. But if that's the only problem, then LMS should be working. That is why the sniffer trace is important. But if you can't collect it, then contact TAC so they can do live troubleshooting.
This document gives several answers on frequently asked questions for PFRv3 channel state behavior.
Q1: What are all the channel operational states from a BR (border role) perspective and what are the rules/conditions to be in each st...
The need was to reach an host inside a LAN through a VPN connection managed by the LAN gateway (Cisco 1921).
The LAN gateway performs NAT and there was a dedicate nat rule for the host i wanted to reach through VPN.
I couldn't connect to the hos...
We have 3 identical switches configured by someone else and would like to claim some of the Gigabit ports(G1/G2/G3/G4) for use on servers. When we try to change the wiring and configuration, we run in to connectivity issues. Attached is a des...