03-21-2024 01:00 AM
Hi,
anybody knows if ACI Smart Licensing over an HTTP proxy supports Basic Auth against the Proxy Server?
In the documentation, there is no hint regarding this. In the configuration, there is no dedicated field for proxy credentials.
Maybe something like http://<PROXY-USERNAME>:<PROXY-PASSWORD>@<PROXY-FQDN>:<PROXY-PORT> would work ... can anyone confirm?
Regards
Johannes
12-01-2024 11:31 PM - edited 12-01-2024 11:32 PM
Hello @Johannes Luther , could you please let us know which documentation you are referring to? Please share the link/s.
12-01-2024 11:44 PM - edited 12-01-2024 11:46 PM
Hi @AshSe
I'm referring to this document:https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/application-policy-infrastructure-controller-apic/218193-configure-and-troubleshoot-smart-licensi.html#toc-hId-1534652629
On the complete page, there is no hit for "basic" or "username" or "authenticat" (ok .. there is one hit for this, but this has nothing to do with proxy basic auth).
There is the APIC system proxy doc as well (https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/system-management-configuration/cisco-apic-system-management-configuration-guide-52x/m-http-https-proxy-policy.html). However, this does not include Smart Licensing as "Cisco APIC Features That Use the HTTP/HTTPS Proxy".
12-03-2024 02:55 AM
Hello @Johannes Luther You are right, Based on the document, there is no explicit mention of support for Basic Authentication for HTTP proxies in the Smart Licensing configuration on Cisco APIC.
As of my latest update, Cisco ACI Smart Licensing does not explicitly support Basic Authentication for HTTP proxies directly within its configuration settings. The documentation and configuration interfaces typically do not provide fields for entering proxy credentials, which suggests that this feature might not be natively supported.
However, you can try using the URL format you mentioned, which includes the proxy credentials directly in the URL. This format is commonly used in various applications to pass credentials to a proxy server:
http://<PROXY-USERNAME>:<PROXY-PASSWORD>@<PROXY-FQDN>:<PROXY-PORT>
Here's how you might configure it:
For example:
http://user:password@proxy.example.com:8080
Steps to configure:
Note: This method is not officially documented by Cisco, so it may not work as expected. If it does not work, you might need to consider alternative solutions such as:
Always ensure that any changes you make comply with your organization's security policies. If you need further assistance, consulting Cisco's official support or documentation might provide additional insights or updates on this capability.
HTH
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide