topic Re: Open NX-OS Programmability Sandbox: Am I Missing Something? in DevNet Sandbox

Open NX-OS Programmability Sandbox: Am I Missing Something?

Alexander Stevenson — Sun, 07 May 2023 16:16:59 GMT

Hello,

I'm practicing with the Open NX-OS Programmability Always On sandbox. Within that, we have the Cisco NX-API Sandbox, which I can login to with admin/Admin_1234!

But every command I try running in the NX-API Sandbox I get an error "401 Authorization Required"

I tried looking at the Command References at https://sbx-nxos-mgmt.cisco.com/reference.html but that is blank for some reason.

Re: Open NX-OS Programmability Sandbox: Am I Missing Something?

bigevilbeard — Mon, 08 May 2023 08:32:28 GMT

Saw this ages back try disabling and reenabling the nxapi feature via the CLI

no feature nxapi feature nxapi

Re: Open NX-OS Programmability Sandbox: Am I Missing Something?

Alexander Stevenson — Tue, 09 May 2023 12:32:49 GMT

Thanks @bigevilbeard , it's working now!

Re: Open NX-OS Programmability Sandbox: Am I Missing Something?

bigevilbeard — Tue, 09 May 2023 12:42:59 GMT

Beginners luck, what can i say!

Re: Open NX-OS Programmability Sandbox: Am I Missing Something?

Alexander Stevenson — Tue, 09 May 2023 12:44:45 GMT

I wish there was a way to find out if someone disabled/enabled nxapi to fix it. Unfortunately 'show cli history' only shows the history from one's own session....but I guess that's a good thing for protecting sensitive information. I'd be interested to know if it would also show passwords in the history. NX-OS encrypts plain text passwords by default, but I wonder how that would look in the history. I'm not going to play around with the passwords on this sandbox, though.

Re: Open NX-OS Programmability Sandbox: Am I Missing Something?

bigevilbeard — Tue, 09 May 2023 12:59:26 GMT

Yes that wont work, you might get that via show accounting log | grep [insert keyword]

sbx-ao# show accounting log | grep TEST_VLAN_32 Sun May 7 11:59:02 2023:type=update:id=10.10.20.28@pts/9:user=admin:cmd=configure terminal ; vlan 32 ; name TEST_VLAN_32 (REDIRECT) Sun May 7 11:59:02 2023:type=update:id=10.10.20.28@pts/9:user=admin:cmd=configure terminal ; vlan 32 ; name TEST_VLAN_32 (REDIRECT) Sun May 7 11:59:02 2023:type=update:id=10.10.20.28@pts/9:user=admin:cmd=configure terminal ; vlan 32 ; name TEST_VLAN_32 (SUCCESS)

Other than this, its using MDT to log device changes to chatops etc.. Of course, no one should be making CLI changes anymore right? 😉