Network Management

NCM missing support for Cisco device Enable levels

This article explains that you cannot set a specific Enable level for NCM 7.3 to operate and describes how to resolve that issue.

First published date

10/8/2018 8:45 PM

Last published date

10/11/2018 5:17 PM

Overview

This article explains that you cannot set a specific Enable level for Network Configuration Manager (NCM) 7.3 to operate, and provides details on how and when to resolve this issue.

Product section

Network Configuration Manager

Resolution

In NCM 7.3, when backing up Cisco config files, you can no longer set a specific Enable level at which NCM would operate. The level of access the account has is generally set in the User configuration in the device or the authentication server and not during a login process. However, if the login practice in ones environment, even outside of NCM is to enter "enable 15," for example, to get into enable mode, then the following solution resolves the issue. 

Before making any changes to the template, be sure to validate with the following question:

When accessing the device outside of NCM, when required to log into the enable level, do you enter just "en" or do you enter enable with a numeric value?

  • If you simply enter "en" or "enable," no changes are required.
  • If you enter the numeric value of the permission level, then follow the instructions below.

Edit the device template for Cisco devices to include an Enable command. For example, to make NCM capable of accessing devices at Enable level 3, add this line:

<Command Name="EnableCommand" Value="enable 3"/>

Save the template with a name that indicates the change. Only use this template with a device that requires Enable level 3.

Note: This Enable value has potential to limit the function of NCM based on the level. A level lower than 15 should be configured at the device or authentication server level rather than the device template to prevent varying permission issues from one device to another.