topic Re: SD WAN always on sandbox - Invalid User or Password in DevNet Sandbox

SD WAN always on sandbox - Invalid User or Password

DavidFi — Thu, 23 Nov 2023 14:09:00 GMT

Please have someone check the SD WAN always on sandbox, it is returning "Invalid User or Password" when I attempt to login.

From postman:

This issue only started occurring this morning. Yesterday worked without issue.

Thank you

Re: SD WAN always on sandbox - Invalid User or Password

bigevilbeard — Thu, 23 Nov 2023 14:14:15 GMT

@DavidFi it could have been locked due to too many failed attempts, this can be done by both the UI and the API. See if this unlocks in a little while.

Hope this helps.

Re: SD WAN always on sandbox - Invalid User or Password

DavidFi — Thu, 23 Nov 2023 19:07:46 GMT

It's been a couple of hours and I'm still getting "Invalid User or Password".

Re: SD WAN always on sandbox - Invalid User or Password

bigevilbeard — Thu, 23 Nov 2023 17:24:08 GMT

@DavidFi uggg... this happen two weeks back and the Cisco team had to unlock this. A while back on an older version, there was a bug where a read only user could force change the password (pre 19.x i recall). Hopefully the team will pick this up and fix this.

Can you access the reservable SD-WAN sandbox?

Re: SD WAN always on sandbox - Invalid User or Password

jonas.resende — Thu, 23 Nov 2023 17:45:35 GMT

@DavidFi Is the issue happening in vManage? If so, try to reboot that. I have experienced that in a LAB environment. Also, try to have a secondary user in case your is locked due to multiple attempts.

Re: SD WAN always on sandbox - Invalid User or Password

DavidFi — Thu, 23 Nov 2023 19:00:28 GMT

Unfortunately our corporate firewall currently blocks anyconnect traffic. It's being looked at, but until then I'm stuck with the Always-On sandbox.

Re: SD WAN always on sandbox - Invalid User or Password

DavidFi — Thu, 23 Nov 2023 19:07:12 GMT

The issue is with the Cisco provided SD-WAN Always-On sandbox. The user account is provided by Cisco and has limited rights.

Re: SD WAN always on sandbox - Invalid User or Password

DavidFi — Mon, 27 Nov 2023 16:26:58 GMT

FYI, it's been a week and the SD-WAN Always-On instance is still locked.

Postman returns "Invalid User or Password".

Attempting to login directly returns the following:

Re: SD WAN always on sandbox - Invalid User or Password

jonas.resende — Fri, 01 Dec 2023 11:12:14 GMT

@DavidFi by some reason the user has been locked, and as you have some automation using this username and password, it will try to authenticate multiple times by automation, however will not be allowed due to invalid password.

My recommendation to you is:

1. Disable any automation running/using this credential.

2. Try to unlock the account with a different admin account.

3. If the issue persist, try to reload vManage also.

I had similar issue with a vManage on lab, which the invalid username/password stopped only after vManage reload.

Be attempt to reload that in a scheduled window.

Something very important also, is to engage Cisco TAC.

Re: SD WAN always on sandbox - Invalid User or Password

bigevilbeard — Fri, 01 Dec 2023 12:11:11 GMT

@jonas.resende good information, but in the sandbox environment, none of that is possible by users only the engineer team at Cisco can do this.

Re: SD WAN always on sandbox - Invalid User or Password

jonas.resende — Fri, 01 Dec 2023 12:20:50 GMT

Got it @bigevilbeard

Re: SD WAN always on sandbox - Invalid User or Password

DavidFi — Fri, 01 Dec 2023 13:01:56 GMT

Looks like the password/account has been reset. The Always-On SD-WAN Sandbox is accessible again.

Thank you to all that replied and helped.