Acquire-config Throws Error, "Command disabled for security purposes" in Oracle AP SBC

Asset ID:	1-72-2186020.1
Update Date:	2017-05-17
Keywords:

Solution Type Problem Resolution Sure

Solution 2186020.1 : Acquire-config Throws Error, "Command disabled for security purposes" in Oracle AP SBC

Applies to:

Acme Packet 4500 - Version S-Cz7.2.0 and later
Information in this document applies to any platform.

Symptoms

Acquire-config command throws error, 'Command disabled for security purposes.'

Error:
ACMESYSTEM# acquire-config 10.x.x.x
Command disabled for security purposes

Cause

TCP ports 3000 & 3001 were made to be controlled exclusively by the remote-control enabled/disabled parameter in the system-config.
Since these ports are the ACP ports, they are used for remote communication with external devices through wancom0, which includes HA redundancy and EMS discovery. The 'acquire-config' command and EMS discovery will fail if this parameter is disabled.

Solution

There is a parameter under system-config named 'remote-control'. By default it is set to enabled.

If it set to 'disabled', then try enabling it. Changing the above parameter to enabled will have to be done in the active system and then a reboot would be required to implement the change. There will service outage for sometime and hence requires downtime.

However, acquire-config is not so reliable and also from security point it is not recommended. It is always safer and recommended to store a backup copy locally and then upload to the system via sftp.

Attachments

This solution has no attachment