Copying Telemetry Policy Files in IOS XR 6.0.1

less than 1 minute read

Due to some general security improvements in 6.0.1, it’s not possible to sftp/scp files directly to the /telemetry/policies directory from the outside. If you try, you might see something like this:


RP/0/RP0/CPU0:Sun601#run
[xr-vm_node0_RP0_CPU0:~]$sftp scadora@172.30.8.11 
Connecting to 172.30.8.11...  
Password:  
sftp>get /tftpboot/BasicPolicy.policy /telemetry/policies/BasicPolicy.policy 
  RP/0/RP0/CPU0:Jun 23 16:08:00.870 : sftp[69048]: %SECURITY-SSHD-3-ERR_GENERAL : Cannot   
  overwrite system files  
sftp>

The restriction on the /telemetry/policies directory will be lifted in 6.0.2, but in the meantime you can work around this by copying files to disk0: and then doing a local copy to the proper directory as follows:


RP/0/RP0/CPU0:Sun601#run
[xr-vm_node0_RP0_CPU0:~]$sftp scadora@172.30.8.11
Connecting to 172.30.8.11...  
Password:  
sftp> get /tftpboot/BasicPolicy.policy /disk0:/BasicPolicy.policy
  Transferred 469 Bytes  
  469 bytes copied in 0 sec (0)bytes/sec  
sftp> quit  
[xr-vm_node0_RP0_CPU0:~]$cp /disk0:/BasicPolicy.policy /telemetry/policies
[xr-vm_node0_RP0_CPU0:~]$

Leave a Comment