topic Can't Access Restconf Always on Sandbox or CSR1000 in DevNet Sandbox

Can't Access Restconf Always on Sandbox or CSR1000

kwasi.ransom — Fri, 22 Apr 2022 10:27:04 GMT

I'm working on the lab Exploring IOS XE YANG Data Models with RESTCONF and I'm following the steps outlined and my get requests are not going through. The directions state that it should receive a 200 response code, and instead my requests keep timing out. For he second part of the lab I am trying to use the CSR1000. I went to make reservation (it said no reservations are required), I am using the credentials provided there and it keeps giving me a notice that the first SSL certificates could not be verified, but when I turn off SSL cert verification it gives a 401 response code. Any suggestions?

Re: Can't Access Restconf Always on Sandbox or CSR1000

bigevilbeard — Fri, 22 Apr 2022 11:17:37 GMT

Hello @kwasi.ransom i am sorry you are struggling here. There are two Always-On XE sandboxes, which one are you using, please?

https://devnetsandbox.cisco.com/RM/Diagram/Index/7b4d4209-a17c-4bc3-9b38-f15184e53a94?diagramType=Topology

https://devnetsandbox.cisco.com/RM/Diagram/Index/27d9747a-db48-4565-8d44-df318fce37ad?diagramType=Topology

I have tested both these now please see results, you can also test this please - if everything is well, you should receive a response similar to the one below.

~ on  master [✘!?⇡] via 🐍 v3.8.0 (new_venv)
❯ curl -k https://sandbox-iosxe-recomm-1.cisco.com/restconf/ -u "developer:C1sco12345"
<restconf xmlns="urn:ietf:params:xml:ns:yang:ietf-restconf">
  <data/>
  <operations/>
  <yang-library-version>2016-06-21</yang-library-version>
</restconf>

~ on  master [✘!?⇡] via 🐍 v3.8.0 (new_venv) took 2s
❯ curl -k https://sandbox-iosxe-latest-1.cisco.com/restconf/ -u "developer:C1sco12345"
<restconf xmlns="urn:ietf:params:xml:ns:yang:ietf-restconf">
  <data/>
  <operations/>
  <yang-library-version>2016-06-21</yang-library-version>
</restconf>

Hope this helps.

Re: Can't Access Restconf Always on Sandbox or CSR1000

kwasi.ransom — Fri, 22 Apr 2022 11:41:46 GMT

For the restconf always on (1st) part of the lab I was using
ios-xe-mgmt.cisco.com (per the environment set up for postman), and then I
switched to ios-xe-mgmt-latest.cisco.com after trying to research on these
forums what may work better. Both just timed out for me.

Initially per the set up environment for Postman, I was using 198.18.134.11
for the CST (2nd) part of the lab to no avail. Then I checked the
environment reservation area and switched to
sandbox-iosxe-recomm-1.cisco.com which gave me the SSL errors.

I will try the addresses you mentioned in a little bit.

Re: Can't Access Restconf Always on Sandbox or CSR1000

bigevilbeard — Fri, 22 Apr 2022 12:33:18 GMT

Hello @kwasi.ransom which learning lab are you following please as the URL might need to be updated to the ones which i shared. If you are doing this in Postman, ensure your Postman's settings are set with the disable SSL certificate verification go to "Settings", click on switcher as in the screenshot below:

Re: Can't Access Restconf Always on Sandbox or CSR1000

kwasi.ransom — Mon, 25 Apr 2022 09:55:34 GMT

Thank you for your help! https://sandbox-iosxe-latest-1.cisco.com worked for me in trying to complete the lab. For some reason https://sandbox-iosxe-recomm-1.cisco.com still gave me an error for unauthorized access even though I was using the same username and password as you. Thank you again!

Re: Can't Access Restconf Always on Sandbox or CSR1000

bigevilbeard — Mon, 25 Apr 2022 10:00:07 GMT

No problem @kwasi.ransom i saw an issue this morning with the recommended sandbox, this has been reported with the ENG team

~ on  master [✘!?⇡] via 🐍 v3.8.0 (new_venv)
❯ ssh developer@sandbox-iosxe-recomm-1.cisco.com
Unable to negotiate with 131.226.217.149 port 22: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1