SDWAN GUI access

[Jawad Hassan 1]

I had installed refplat_p-20240322-supplemental-iso in cml 2.8, and can access all controllers and V edges images only+external connector in this package, after that initial configuration applied on the contorllers vmanage, vbond,vsmart, I need to access vManage on GUI/webrowser to onboard the vedge nodes on it,  I did not find any host/server in this package, where can connect to the external host-window server etc for GUI access. How can I connect and access vmanage on GUI in this scernario? Thank you

[bigevilbeard]

From what i read in other posts - you will access the web GUI for SD-WAN Manager from the non management IP address that you assigned to vpn 0. Also note that after you turn the SD-WAN Manager node on it can take 15+ minutes for the GUI to fully initialize.

[Jawad Hassan 1]

Hello Bigevilbeard,

Thanks for the reply and giving your time but unfortunately above solution is not working as not sure how can an IP in CML VMware virtual environment will be access on a physical machine.

regards,

Jawad Hassan

[bigevilbeard]

No problem, the developer doc point to this https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/cisco-sd-wan-overlay-network-bringup.html 

[Torbjørn]

Hello @Jawad Hassan 1,

If you wish to connect to the vManage GUI from a CML node you can use the "Desktop" node type. Have you installed the nodes from the regular refplat as well?

If you wish to be able to access the vManage UI directly from your workstation you can connect a VPN 0 interface to an external connector in system bridge mode and give it an address in the same network as your CML server. You can read more about this here: https://developer.cisco.com/docs/modeling-labs/system-bridge-mode/ 

[Jawad Hassan 1]

Hello Torbjorn,

many thanks for the help, it is working now but  stuck on credentials, can you please confirm the default user/password as tried admin/cisco, cisco/cisco but not accepting. Also do I need serialfile.viptela for this CML version to add vedges. If yes, what is the way for this pelase, do I need to pay if have for personal use. Thanks you for all the help and really appreciated.

Regards,

Jawad Hassan

[Torbjørn]

Default credentials for Cisco SD-WAN is admin/admin and you should be prompted to change it upon first login.

You do need a serialfile to onboard virtual cEdges/vEdges, it should not cost anything for personal lab use. See the following video for how you can generate one: https://www.youtube.com/watch?v=TZ1cnZqpL90 

[Jawad Hassan 1]

Hi Torbjorn,

Once again thank you for taking time to respond but unfortunately, my credentials still not working as below and snapshot attached...

1.Step 1 : Change password from admin/admin to admin/cisco vManager CLI.
2.Step 2 : Select persona for vManage [1,2 or 3]:selected 1 and y
3.Step 3 : Select storage device to use: 2 sdb (256Gb)
But on GUI, After entering credentials of admin/cisco, it does not do anything and goes back to username screen or gives me an error of invalid credentials.
I had reserved 48GB memory only for vmanage,also at the startup, it was giving me the below error but than stopped itself.

cat: /opt/web-app/etc/server_configs.json: no such file or directory

My CM IP via VMware is 192.168.60.163 and had give 192.168.60.250/24 for vpn-0 int eth0 ip and and as you can see from snapshot, I am able to open the GUI page.

[Torbjørn · Accepted solution]

I suspect this might be browser security related. Can you try the same, but make sure you use https://192.168.60.250 and not http://192.168.60.250? 

[Jawad Hassan 1]

Hello and thank you sir as finally it works, one last question, which CA shall I use? Any recommendations please, any open source as just for lab purposes.

once again thank you for all your help.

regards,

Jawad Hassan

[Torbjørn]

I find it easiest to use openssl to generate a CA certificate. This guide shows you how to do this step-by-step: https://networklessons.com/cisco/cisco-sd-wan/cisco-sd-wan-controllers-installation#Certificates 

Note that the "Organisation" component of the certificate subject must match your SD-WAN organisation name.

[Jawad Hassan 1]

Hi Torborn,

Many tahnks as really helpful and all issues fixed. Once againa  big thank you.

Regards,

Jawad

[Torbjørn]

No problem. Have fun labbing!