Symptom
- SCP from vManage to routers on the overlay does not work with a user different than "admin" and port 830
- The following command was used during tests from vManage.
--- scp -P 830 admin@X.X.X.X:/bootflash/root-ca.cert /home/admin/test_scp
- Where X.X.X.X is System-IP of the router.
- With the previous command, using a user different than "admin", SCP does not work; No error is displayed but any file is copied.
Conditions
- vManage running 20.9.3
- Routers running 17.9.X on controller mode.
Workaround
- SCP only works with router's "admin" user.
- Customer wants a different workaround since they have to make changes on their config to get admin user works locally; By now customer is using tacacs and admin user does not work with this method.
- Customer had to config the following to get the admin user authenticated locally on the router.
--- aaa authentication login default local group tacacs-1
Further Problem Description
- Customer has some routers running 17.6.2 and SCP works with users different than "admin"