cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
812
Views
0
Helpful
3
Replies

APIC Smart Licensing over proxy with authentication

Johannes Luther
Level 4
Level 4

Hi,
anybody knows if ACI Smart Licensing over an HTTP proxy supports Basic Auth against the Proxy Server?
In the documentation, there is no hint regarding this. In the configuration, there is no dedicated field for proxy credentials.
Maybe something like http://<PROXY-USERNAME>:<PROXY-PASSWORD>@<PROXY-FQDN>:<PROXY-PORT> would work ... can anyone confirm?

 

Regards

Johannes

3 Replies 3

AshSe
VIP
VIP

Hello @Johannes Luther , could you please let us know which documentation you are referring to? Please share the link/s.

Hi @AshSe

I'm referring to this document:https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/application-policy-infrastructure-controller-apic/218193-configure-and-troubleshoot-smart-licensi.html#toc-hId-1534652629

On the complete page, there is no hit for "basic" or "username" or "authenticat" (ok .. there is one hit for this, but this has nothing to do with proxy basic auth).

There is the APIC system proxy doc as well (https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/system-management-configuration/cisco-apic-system-management-configuration-guide-52x/m-http-https-proxy-policy.html). However, this does not include Smart Licensing as "Cisco APIC Features That Use the HTTP/HTTPS Proxy".

Hello @Johannes Luther You are right, Based on the document, there is no explicit mention of support for Basic Authentication for HTTP proxies in the Smart Licensing configuration on Cisco APIC.

As of my latest update, Cisco ACI Smart Licensing does not explicitly support Basic Authentication for HTTP proxies directly within its configuration settings. The documentation and configuration interfaces typically do not provide fields for entering proxy credentials, which suggests that this feature might not be natively supported.

However, you can try using the URL format you mentioned, which includes the proxy credentials directly in the URL. This format is commonly used in various applications to pass credentials to a proxy server:

http://<PROXY-USERNAME>:<PROXY-PASSWORD>@<PROXY-FQDN>:<PROXY-PORT>

Here's how you might configure it:

  1. Proxy URL Format: Ensure that the proxy URL is correctly formatted with the username and password.
  2. Configuration: Enter this formatted URL in the proxy settings of your ACI Smart Licensing configuration.

For example:

http://user:password@proxy.example.com:8080

Steps to configure:

  1. Access the ACI management interface.
  2. Navigate to the Smart Licensing configuration section.
  3. Enter the proxy URL in the appropriate field.

Note: This method is not officially documented by Cisco, so it may not work as expected. If it does not work, you might need to consider alternative solutions such as:

  1. Proxy Server Configuration: Configure your proxy server to allow unauthenticated access from the ACI system's IP address.
  2. Network Configuration: Set up a dedicated proxy server that does not require authentication for the ACI system.
  3. Cisco Support: Contact Cisco support for guidance or to request a feature enhancement.

Always ensure that any changes you make comply with your organization's security policies. If you need further assistance, consulting Cisco's official support or documentation might provide additional insights or updates on this capability.

HTH

Review Cisco Networking for a $25 gift card

Save 25% on Day-2 Operations Add-On License