My SA2500 is running IVE 7.1R7 and I am testing an upgrade to 7.2R4.
After the upgrade everything is working except the Netconf / XML-RPC tools I had
I did a rollback and can confirm it is something introduced in 7.2 as it works fine up to 7.1R11
Here is the command I am trying to push and for which I get an error :
<?xml version="1.0" encoding=\"UTF-8\"?> <rpc message-id="03" xmlns="urn:ietfarams:xml:ns:netconf:base:1.0"> <edit-config> <target><running/></target> <config> <configuration> <users> <resource-profiles> <telnet-ssh-profiles> <telnet-ssh-profile operation='create'> <type>ssh</type> <name>SSH-192.168.1.10</name> <host>192.168.1.10</host> <port>22</port> <roles>ROLE-TEST</roles> <sessions> <session> <name>SSH-192.168.1.10</name> <host>192.168.1.10</host> <port>22</port> <roles xsi:nil="true"/> </session> </sessions> </telnet-ssh-profile> </telnet-ssh-profiles> </resource-profiles> <resource-policies> <telnet-ssh-policies> <telnet-ssh-acls> <telnet-ssh-acl operation='create'> <name>SSH-192.168.1.10</name> <resources>192.168.1.10:22</resources> <parent-type>telnet</parent-type> <roles xsi:nil="true"/> <rules> </rules> </telnet-ssh-acl> </telnet-ssh-acls> </telnet-ssh-policies> </resource-policies> </users> </configuration> </config> </edit-config> </rpc> ]]>]]>
In 7.1, here is the reply I get, it only has a warning and the configuration is applied :
<rpc-reply message-id="03" xmlns="urn:ietfarams:xml:ns:netconf:base:1.0"> <rpc-error> <error-type>application</error-type> <error-tag>partial-operation</error-tag> <error-severity>warning</error-severity> <error-app-tag>implicit-change</error-app-tag> <error-message>The configuration has been implicitly changed</error-message> </rpc-error> </rpc-reply> ]]>]]>
In 7.2 however I get an error and the configuration is not applied
Looking at theRelease Notes, DMI and netconf guides, there is no difference between 7.1 and 7.2 resourcse configuration via XML.
The same thing happens when deleting a resource
Has someone some insight on what could be the cause?
Solved! Go to Solution.
The issue was du to the <roles xsi:nil="true"/> tag. After removing it, it works fine with 7.2
I have noticed further changes that are not documented. The 7.2 DMI guide is incorrect. This causes issues when parsing the result
OK Reply in IVE 7.1 :
<rpc-reply message-id="101" xmlns="urn:ietfarams:xml:ns:netconf:base:1.0"> <ok/> </rpc-reply> ]]>]]>
OK Reply in IVE 7.2 :
<rpc-reply xmlns="http://xml.juniper.net/ive-sa/7.2R4"> <ok/> </rpc-reply> ]]>]]>
Error Reply in IVE7.1 :
<rpc-reply message-id="101" xmlns="urn:ietfarams:xml:ns:netconf:base:1.0"> <rpc-error> <error-type>application</error-type> <error-tag>partial-operation</error-tag> <error-severity>warning</error-severity> <error-app-tag>implicit-change</error-app-tag> <error-message>The configuration has been implicitly changed</error-message> </rpc-error> </rpc-reply> ]]>]]>
Error Reply in 7.2 :
<rpc-reply xmlns="http://xml.juniper.net/ive-sa/7.2R4"> <rpc-error xmlns="urn:ietfarams:xml:ns:netconf:base:1.0"> <error-type>application</error-type> <error-tag>partial-operation</error-tag> <error-severity>warning</error-severity> <error-app-tag>implicit-change</error-app-tag> <error-message>The configuration has been implicitly changed</error-message> </rpc-error> </rpc-reply> ]]>]]>