Access Requirements for Image Bundle Upgrades

If AAA is configured (enabled) on the switch, you must have certain access rights before you can perform image bundle upgrades on the switch.

The specific access rights required to perform image bundle upgrades when AAA is configured are:
  • Config session
  • Bash
The access rights to execute bash commands is required because the following bash command must be executed to upgrade image bundles: 
bash timeout 10 sudo rm -f /mnt/flash/boot-extensions && echo -e '' > /mnt/flash/boot-extensions
Note: If AAA is enabled and you attempt to perform image bundle upgrades without having these required access rights, the upgrade will fail and the following error occurs: 
Jul 11 11:36:45 cd342 Aaa: %AAA-4-CMD_AUTHZ_FAILED: User cvpadmin failed authorization to execute command 'bash timeout 10 sudo rm -f
/mnt/flash/boot-extensions && echo -e '' > /mnt/flash/boot-extensions