SD-WAN Template Attach Error on vManage

When configuring Cisco's SD-WAN vSmart CLI template, when attempting to attach a vEdge device under the vSmart configuration in the template screen, you may encounter the following error:

Device failed to process request. Error type : application Error tag : access-denied

This occurs primarily due to a bug on the vManage device. According to Cisco, the Ciscotac config is not supported from vManage currently.

To resolve this issue, the ciscotacro and ciscotacrw users must be removed. Specifically, the following config section must be removed from the AAA configuration.

user ciscotacro
   description CiscoTACReadOnly
   group operator
  !
  user ciscotacrw
   description CiscoTACReadWrite
   group netadmin
  !

According to the bug report, some users are able to resolve their issue in this manner, while others are not. This bug affects Cisco SD-WAN releases 20.3.1 and 20.4.1.

Links

https://networklessons.com/cisco/ccie-enterprise-infrastructure/cisco-sd-wan-vsmart-cli-template https://quickview.cloudapps.cisco.com/quickview/bug/CSCvu69248