Connection attempt has timed out. Please verify Internet connectivity

[viapakgoyal525241395]

I am trying to VPN into Cisco Devnet Sandbox to access my lab but everytime I try, the connection attempt times out. I gave the same gateway info and credentials to my buddy in another location and he was able to VPN into it. The gateway info is below:

gateway: devnetsandbox-emea-gwy.cisco.com:20238

username: viapakgoya

Is there a reason that I can't VPN in from one location but it can be VPN into from another location. I have tracerouted to the gateway successfully on the given port.

Any help would be appreciated!

Thank you!

Viapak

[bigevilbeard]

Hello, which sandbox are you trying to access, please?

Thanks!

[viapakgoyal525241395]

Hi,

I’m using the following sandbox. Also some of colleagues are reporting the exact same issue. It looks like it can be accessed from some locations but not from others.

Sandbox info: Open NX-OS with Nexus 9Kv

Thank you!
Viapak

[bigevilbeard]

Thanks, I will raise this with ENG to see if anything shows up. In the meantime please ensure the port range will be anywhere from TCP 20100 through TCP 20354. If that's not working, keep in mind VPNs also use TLS (TCP 443) and DTLS (UDP 443). Though typically these are open in most organizations.

[viapakgoyal525241395]

Hi,

So I reserved a different POD (Multi-IOS Cisco Test Network Lab) and I got the following gateway which I was able to successfully connect to.

Gateway: devnetsandbox-us-sjc.cisco.com:20153

So I decided to again reserve the Nexus n9kv POD and I got the following gateway which I was unable to connect to.

Gateway: devnetsandbox-emea-gwy.cisco.com:20199

It looks like the gateways that are provisioned in emea are having issues. I don't know if that will help in tracking the issue but this is my observation.

Thanks!

Viapak

[most_ahdy]

I have exactly the same issue, with username most_ahdy and with the same sandbox  Open NX-OS with Nexus 9Kv

[viapakgoyal525241395]

Hi,

After the maintenance window that occurred over the weekend, my anyconnect client can't even reach the gateway. However, tcptraceroute is successful on the port provided. Please see below:

Tracing the path to devnetsandbox-emea-gwy.cisco.com (173.38.221.89) on TCP port 20233, 30 hops max
1 192.168.1.1 0.650 ms 0.486 ms 0.514 ms
2 * * *
3 * * *
4 cpe-024-074-247-066.carolina.res.rr.com (24.74.247.66) 17.974 ms 16.895 ms 20.125 ms
5 24.93.67.204 17.950 ms 17.833 ms 16.165 ms
6 bu-ether11.atlngamq46w-bcr00.tbone.rr.com (66.109.6.34) 18.638 ms 22.413 ms 16.096 ms
7 0.ge-0-0-0.ar0.den30.tbone.rr.com (66.109.6.150) 36.372 ms 32.530 ms 40.639 ms
8 0.ae3.pr1.dfw10.tbone.rr.com (107.14.17.238) 40.383 ms 40.936 ms 42.488 ms
9 66.109.5.138 38.043 ms 45.091 ms 37.939 ms
10 0.ae0.pr0.nyc20.tbone.rr.com (66.109.6.157) 35.388 ms 39.509 ms 27.718 ms
11 107.14.16.14 29.830 ms 37.773 ms 34.058 ms
12 ldn-s2-rou-1101.uk.eurorings.net (134.222.48.93) 116.344 ms 131.898 ms 118.148 ms
13 ldn-s1-rou-1101.uk.eurorings.net (134.222.48.110) 118.750 ms 116.287 ms 113.574 ms
14 asd2-rou-1022.nl.eurorings.net (134.222.48.199) 121.058 ms 116.107 ms 119.065 ms
15 asd2-rou-1043.nl.eurorings.net (134.222.48.223) 113.569 ms 107.189 ms 119.462 ms
16 alr-s1-rou-1042.nl.eurorings.net (134.222.48.219) 119.607 ms 115.750 ms 116.205 ms
17 134.222.93.54 117.107 ms 118.742 ms 115.546 ms
18 aer01-mda2-cbb-gw2-ten0-0-0-26.cisco.com (173.38.208.30) 116.925 ms 126.033 ms 117.741 ms
19 173.38.246.78 114.161 ms 111.477 ms 119.124 ms
20 aer01-mda2-dmznet-gw2-ten1-1.cisco.com (173.38.208.18) 121.071 ms 120.337 ms 120.478 ms
21 aer01-mda2-dmzvaas-gw2-gig0-2.cisco.com (173.38.208.230) 107.350 ms 114.306 ms 114.988 ms
22 173.38.209.138 135.283 ms 136.357 ms 136.696 ms
23 173.38.221.90 135.257 ms 143.207 ms 140.027 ms
24 devnetsandbox-emea-gwy.cisco.com (173.38.221.89) [open] 139.756 ms 1980.999 ms *

[bigevilbeard]

ENG team is looking into this.

Hope this helps.

[Hesham Eldokmary]

Also  I am still facing the same issue , I reserved the ACI Simulator Lab  twice

I cancelled my 1st reservation and tried again ,,,same messages check connection attempt has timed out , please verify internet connectivity.

devnetsandbox-emea-gwy.cisco.com:20200

Username: hesham.eld

[bigevilbeard]

Please see this thread here - it appears some ISP are filtering/dropping the ports used for the sandbox. You can check if the ports are open outbound to the destination. The port range will be anywhere from TCP 20100 through TCP 20354. If that's not working, keep in mind VPNs also use TLS (TCP 443) and DTLS (UDP 443). Though typically these are open in most organizations.

Hope this helps.