I have not been successful in capturing the configuration file for PA-500 devices using NCM. ICMP works; SNMPv3 does not.
I also am having problems with a PA-500 and backups with NCM. They always come back with configuration being too short, discarding.
Did you try one of the Device Templates shared on the content exchange? Are those templates also throwing this error?
I have tried other templates, yes. Unfortunately changing the template did not seem to fix the issue. We see the following in our email report for the job:
ERROR: Cannot download Running config : Connectivity issues, discarding configuration (or configuration is too short)
I've separated out our running-config and startup-config backup jobs, thinking that perhaps NCM was trying to open two SSH sessions at once to a single device. This has not fixed the problem though, as our daily report has either one or two of our PA-500's fail on each job. Sometimes it succeeds, but most of the time it fails and I have to re-run it manually. A manual job generally downloads things just fine.
I'm tempted to run debugs on the NCM jobs just to see what exactly is causing the problem, or what the configs look like.
I'd also enable session tracing like you suggested, then check the logs. Can you Post here what commands are needed to show the config on a PaloAlto?
also the format of the command prompt and the more prompt.
maybe we can create our own template here with the combined effort of the community
To capture the running-config:
show config running
To capture the startup-config:
show config saved running-config.xml
Command prompt format is:
admin@pa-500(active)>
I am unsure what you mean by the more prompt. There isn't an enable or privileged mode from what I can tell. I'm just a normal superuser. I'll go ahead and do some session tracing and see if I can identify what is causing the failure.
