Description

This article describes causes of the CSO JOB failure and procedure to debug.

Symptoms

Management Stage 2 template fails to deploy. 
Failed job shows following:

Job Failed:
Deployment task failed on 1 out of 1 sites. Below is the list of sites where deployment task failed.
JNPR0012-1000
Job logs:
Mar 28, 2023, 3:44:49 PMUpdate Deploy Configuration Job failed
Task: 1.deploy configuration to JNPR0012-1000
Mar 28, 2023, 3:44:33 PMTask started
Mar 28, 2023, 3:44:33 PMStart to Deploy Configuration to Device JNPR0012-1000
Mar 28, 2023, 3:44:49 PMDeploy Configuration Failed on Device JNPR0012-1000
Mar 28, 2023, 3:44:49 PMTask complete

Further checking the detailed logs via: View Detailed Logs > View Job Log > Select "error" from drop down
One can find the correct error.

Under load-configuration stanza we see the error:

<load-configuration-results action=\"set\" format=\"text\">\n<nc:rpc-error>\n<nc:error-type>protocol</nc:error-type>\n<nc:error-tag>operation-failed</nc:error-tag>\n<nc:error-severity>error</nc:error-severity>\n<nc:error-message>syntax error, expecting '[' or &lt;data&gt;</nc:error-message>\n<nc:error-info>\n<nc:bad-element>next-hop</nc:bad-element>\n</nc:error-info>\n</nc:rpc-error>\


Further looking into the error we see the bad-element "next-hop" part of following config:

nset groups nfx-sdwan-jcp-mgmnt routing-options static route 10.1.1.1 next-hop \nset apply-groups nfx-sdwan-jcp-mgmnt\n\n\n\n\nset groups nfx-sdwan-jcp-mgmnt system ntp server 10.2.2.2\n

Solution

  1. Navigate to the tenant and check the Configuration Template: (Home > Resources > Templates > Configuration Templates)
  2. Click on "VIew" button for the Deployed devices section for the JCP Mgmt Template into question.
  3. Select the radio button for the spoke for which Deployment failed. 

UI should show the rendered template configuration on the right side of the same window. 

set groups nfx-sdwan-jcp-mgmnt system ntp server 10.1.1.1
set groups nfx-sdwan-jcp-mgmnt routing-options static route 10.1.1.1 next-hop 
set groups nfx-sdwan-jcp-mgmnt system ntp server 10.2.2.2
set groups nfx-sdwan-jcp-mgmnt routing-options static route 10.2.2.2 next-hop


When crosschecked, the following configuration were missing from the stage 2 template deployment causing the Job failure.

  1. JCP Template: Use Single SSH To NFX - Enable
  2. JDM Template: Use Single SSH To NFX - Disable

and GWR(Spoke) Loopback Address* : 100.126.3.65

Adding the same and redeployed. Deployed the same and user was able to login via SSH via the user machine terminal.

Modification History

2023-05-15: Initial publication