Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

SCP IOS Image Upgrades in Prime Infrastructure 2.1 Failing

Hi I'm running PI 2.1 with all the latest patches and packs but I can't get SCP Image transfers to work.

When I check the suggested logs from the Jobs Dashboard (and jump into the CLI root)  I see the following:
[SWITCH-DEVICE]=Switch Hostname
[SWITCH-ADMIN-LOGIN]=Level 15 username login to Switch, same username the is used in the Device Work Centre
[PRIME-INF-IP]=Prime Infrastructure Server

[SWITCH-DEVICE]#archive download-sw ............... archive download-sw /allow-feature-upgrade  

/overwrite scp://[SWITCH-ADMIN-LOGIN]@[PRIME-INF-IP]//localdisk/tftp/c3560-ipbaselmk9-tar.122-55.SE9.tar

Password:

Password:

% Authentication failed.

 Could not buffer tarfile...using multiple downloads

examining image...

Password:

Password:

% Authentication failed.

%Error opening scp://[SWITCH-ADMIN-LOGIN]@[PRIME-INF-IP]//localdisk/tftp/c3560-ipbaselmk9-tar.122-55.SE9.tar (Permission denied)

%Error opening flash:update/info (No such file or directory)

ERROR: Image is not a valid IOS image archive.

[SWITCH-DEVICE]#


It looks like the switch is trying to log into the PI server and download the software as opposed to PI sending the software to the switch.

I've used WinSCP to open up the URL, but none of the passwords I know or created work.


Do I need to SSH into the PI box and create a new CLI account (or Root CLI account) that matches up to the switch [SWITCH-ADMIN-LOGIN]?

 

Regards,

Everyone's tags (5)
1 ACCEPTED SOLUTION

Accepted Solutions
Community Member

Hi rowansakul,I didn't set

Hi rowansakul,

I didn't set specific permissions but put a 14 character password for the new user in root cli.

useradd [new user]

passwd [new user] 

Then applied the new user and password in the GUI as listed above.

7 REPLIES
Community Member

Hi rowansakul, The work

Hi rowansakul,

 

The work around for this particular issue involves having a user set up in the root cli and then from the the GUI navigate to Administration > System Settings > Image Management and set up the SSH Username with your new user account that you created under root cli.  That is the credentials that Prime is looking for when it is attempting to access its own image repository.

 

Regards,

Brandon

Community Member

Hi Brandon, thanks for the

Hi Brandon, thanks for the reply.

Just to confirm your interpretation of "root cli"...

  • is that Prime Infrastructure CLI
  • or the RedHat OS underneath you can access by typing in "root" from the Prime Infrastructure CLI

Thanks

Community Member

Hi rowansakul, Yes that is in

Hi rowansakul,

 

Yes that is in the OS itself that you create that user, essentially Prime Infrastructure has to authenticate to its OS to gain access to the image repository.  To date I've only had it be an issue with switches that use the "archive" command for SWIM distribution.  Hope this helps.

 

Regards,

Brandon

Community Member

Hi Brandon,That's exactly the

Hi Brandon,

That's exactly the problem I'm trying to solve. Does the new user need to have any special OS permissions. I don't speak Linux too well!

Regards,

 

Community Member

Hi Brandon, Would the

Hi Brandon,

 

Would the following work?

# useradd -ou 0 -g 0 [USER-NAME]
# passwd [USER-NAME] [USER-PASS]

Community Member

Hi rowansakul,I didn't set

Hi rowansakul,

I didn't set specific permissions but put a 14 character password for the new user in root cli.

useradd [new user]

passwd [new user] 

Then applied the new user and password in the GUI as listed above.

Community Member

Thanks Brandon, it's now all

Thanks Brandon, it's now all working as intended.

Love those undocumented procedures...

Cheers,

Rowan

2524
Views
10
Helpful
7
Replies
CreatePlease to create content