Showing results for 
Search instead for 
Did you mean: 

403 Error Cisco-IOS-XE Always On DevNet Sandbox

Level 1
Level 1

Recently, I had been trying out POST request on the Cisco IOS-XE always on sandbox, in order to create a new interface using RESTCONF API.

The problem is, I am getting a 403 error code.


Quite a while back, I was able to successfully create a POST request (201 Response Code) using the "ietf-interfaces" YANG module (using Postman and Python Script).

However, this is no longer working (even using the same script which once succeeded).

Is this a issue with the sandbox environment? Any of you having the same problem, or is it working with you guys? The GET request seems to still be working...

5 Replies 5

Level 1
Level 1

As a reference, I am attaching the following content for Body (request).


  "ietf-interfaces:interface": {
    "description""Creating a Loopback interface using Python",
    "ietf-ip:ipv4": {
      "address": {
For Headers, I used the following:
"Content-Type": "application/yang-data+json"

@ko0363 which XE always on sandbox are you using please, as there is two


HOST = ''
HOST = ''

I am able to run a PUT and GET to '' with the following code below to ''


As these are always on Sandbox, it could be other users are using these and this is blocking your use case/testing. Can you test on the alternative XE always-on device.



Please mark this as helpful or solution accepted to help others
Connect with me


Thank you for your prompt response!

I was using 


at first and tried using the alternative 


When I changed the endpoint URI, it says that it could not send a response. 

Do you have the link for the information regarding  '" sandbox? (like credentials, RESTCONF port number, etc)


By the way, let me attach my RESTCONF request via postman for "".
Is there something wrong with the request information?



スクリーンショット 2021-05-13 092459.pngスクリーンショット 2021-05-13 092442.pngスクリーンショット 2021-05-13 092426.pngスクリーンショット 2021-05-13 092401.png

Sure here is the link


The main difference is the port. 


Hope this helps!

Please mark this as helpful or solution accepted to help others
Connect with me

Thanks for the link!


It successfully worked on the latest version of CSR1000v, that is, '".

However, it is not working on the older version; "".

(using the same credentials, headers, body, etc)


I assume the older version is denying post requests.