When logging into a N5K or a N7K system VDC, the default User-Roles assigned is “network-operator”. When logging into a VDC, the default User-Roles is “vdc-operator”.

You need to add a new shell role or you also can add multiple roles:

shell:roles="\"network-admin vdc-admin\""

# sh user-account
user:admin
 this user account has no expiry date
roles:vdc-admin
user:account1
 roles:vdc-operator
account created through REMOTE authentication
Credentials such as ssh server key will be cached temporarily only for this user
 account
Local login not possible

After modify your tacacs+ configuration, you need to clear the user account cached.

(config)# no username account1

Your user in cache disappears

# sh user-account
user:admin
 this user account has no expiry date
 roles:vdc-admin

Verification :

# sh user-account
user:admin
 this user account has no expiry date
 roles:vdc-admin
user:account1
 roles:vdc-admin

Now your user have the good right.

 

 

If you want remove switch-profile, you can use this command. Make sure you have a copy of the config before doing this. Just in case 🙂

switch(config-sync)# no switch-profile <your profile> profile-only all

You have three possibility :

# no switch-profile your_profile ?
 all-config Deletion of profile, local and peer configurations
 local-config Deletion of profile and local configuration
 profile-only Deletion of profile only and no other configuration

Estimate memory to allocate for a vdc :

# sh routing ipv4 unicast memory estimate routes 600000 next-hops 2
Shared memory estimates:
 Current max 96 MB; 36526 routes with 32 nhs
 Current max 96 MB; 32013 routes with 32 IPv6 nhs
 in-use 1 MB; 11 routes with 1 nhs (average)
 in-use 1 MB; 11 routes with 0 IPv6 nhs (average)
 Configured max 8 MB; 2651 routes with 32 nhs
 Configured max 8 MB; 2324 routes with 32 IPv6 nhs
 Estimate memory with fixed overhead: 215 MB; 600000 routes with 2 nhs and 0 IPv6 nhs
 Estimate with variable overhead included:
 - With MVPN enabled VRF: 233 MB
 - With OSPF route (PE-CE protocol): 267 MB
 - With EIGRP route (PE-CE protocol): 307 MB