Cisco SD-WAN Controllers Installation

Lessons Discussion
65

Hello Irvin

Indeed, in the lesson as well, this command does throw an error, but the process in the lesson is able to continue. As it states in the lesson:

We can download the root certificate from the vManage controller using the request command. Here’s what it looks like:

vBond1# request download scp://admin@10.1.0.1:/home/admin/ROOT-CA.pem
/usr/bin/download: line 33: /proc/sys/kernel/hung_task_timeout_secs: Permission denied
The authenticity of host '10.1.0.1 (10.1.0.1)' can't be established.
ECDSA key fingerprint is SHA256:tDhYof1C8igzPm29fFlV5afe44qjJZAEDCNv9qQ2gPE.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.1.0.1' (ECDSA) to the list of known hosts.
viptela 19.3.0 

admin@10.1.0.1's password: 
ROOT-CA.pem                                   100% 1257    41.1KB/s   00:00    
/usr/bin/download: line 33: /proc/sys/kernel/hung_task_timeout_secs: Permission denied

It throws an error but it does work. With another request command we can install the root CA certificate:

Take a look again and see if the process allows you to continue like in the lesson, even if it gives you an error…

I hope this has been helpful!

Laz

66

I see what I was doing wrong, I was doing the scp from the wrong device, I was suppose to do it from the vManager and not vBond. Thanks for the response..much appreciated

1 Like
67

For everyone who wants to build a SD-WAN home lab, I just published a lesson on how to do this in Cisco CML:

This is a great way to do it. Cisco released a tool that automates the installation 100%. It does everything…create the topology, add controllers, configure them, add licenses, certificates, onboard routers, etc.

It took about 30 minutes to test the tool, deploy the controllers and routers. Highly recommended if you don’t want the hassle with adding images to EVE-NG, creating configs, certificates, get licenses from your Cisco CCO account, etc.

Rene