Cloud CLI Configuration Mode not working

[niklash]

Hi folks,

I wanted to give the Cloud CLI in configuration mode a try, however I am getting the following error:

Unable to launch Configuration Mode due to the following reasons:
1. Telemetry subscription 10002 missing or misconfigured, e.g., no 'update-policy'
2. The device configuration is out of sync with cloud, please check the alert

The documentation just states that those are requirements, but since I only have read-only CLI access at the moment, how can I fix this?^^

Thanks and kind regards
Niklas

[cmr]

What model of Catalyst switch are you trying on and what firmware version are you using?

I have it working on a C9300L-24UXG-4X-M running 17.15.3.

[niklash]

I'ts a C9300L-24P-4X, also running 17.15.3.

[cmr]

Hmm, almost the exact same setup then!  Did it used to work, or has it always been broken?

[niklash]

I just found out that its possible to have a CLI that is not read-only - so never tried that before. I also tried rebooting, but still same problem.

[alemabrahao]

This is a mandatory telemetry configuration that must be present and correctly set up on the device. It includes an update-policy that allows the dashboard to push configuration changes. If you're in read-only mode, you cannot configure telemetry yourself. This must be done by someone with full configuration access to the device.

[GIdenJoe]

If that switch was a C9300-M native then the config should be present.  If it is not then it is possible that a wrong netconf push was done and the switch didn't accept the configuration leaving you in a soft-lock situation.

Support should be able to push the correct configuration to the switch to be able to have full management again.

[GIdenJoe]

I just upgraded a C9300 switch to 17.15.3.1 and I have the same issue:

Welcome to the interactive CLI IOS XE terminal
Verifying your device configuration. Please wait...Done
Unable to launch Configuration Mode due to the following reasons:
1. The device configuration is out of sync with cloud, please check the alert
2. Telemetry subscription 10002 missing or misconfigured, e.g., no 'update-policy'

You are in Read-only Mode

Establishing connection to your device. Please wait...
Connection established successfully

So I'm guessing it is a bug.

I have checked the running config and no telemetry subscriptions are available.

Have you contacted support yet?

[niklash]

Yes, I opened a case on Tuesday evening, but still no reply.
I will keep you updated....

[Mifi]

Hi,

I had the same issue, adding required telemetry subscription solved the issue. Add this to your config:

telemetry ietf subscription 10002
encoding encode-tdl
filter tdl-uri /services;serviceName=iosevent/syslog_msg
stream native
update-policy on-change
receiver name meraki_syslog_msg

[GIdenJoe]

We would if we could 😉  But -M switches cannot be configured locally.

[Sauce]

Have you received any update regarding this issue? I'm currently experiencing the same thing as well with my Meraki managed C9300.

[niklash]

Unfortunately not. Don't no why they are not responding to my ticket. I think I have to escalate this to the responsible engineer for us at Cisco.

[cmr]

What version did you upgrade it from?

[GIdenJoe]

I'm not sure if it is 17.2.x or 17.1.x.

In any case: none of the C9300's that I put on 17.15.3.1 have the telemetry configuration.

I tried to add it to a C9300-24S, however I believe the rest of the telemetry configuration is missing too since it still gives the error that due to the missing telemetry I only get read only access.