Guest

Preview Tool

Cisco Bug: CSCvs65820 - Prime Infrastructure's Configuration Archive Overwrite will not work in ISR 4431 due to ciphers used

Last Modified

Jan 23, 2020

Products (1)

  • Cisco Prime Infrastructure

Known Affected Releases

3.7

Description (partial)

Symptom:
Prime Infrastructure may fail to execute a Configuration Archive Overwrite in an ISR 4431 device, due to a mismatch in the SSH cipher proposal (PI will offer a 1048 bit cipher, while the ISR's minimal cipher is 2048 bits.)

Conditions:
Create a Prime Infrastructure 3.4 with MR2.
Add an ISR 4431 to Inventory, and do a sync until the device is in the complete inventory collection state
Check that the latest Configuration Archive is correct, then change something in the device configuration
Try to execute the Configuration Archive Overwrite;  it will fail showing the Prime Infrastructure authentication failed 3 times message
On the ISR, you will see the following message:

Jan 12 18:35:00.784: %SSH-3-NO_MATCH: No matching cipher found: client 3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc server aes128-ctr,aes192-ctr,aes256-ctr
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.