Updates to Sandbox Reservation Internet Access Policy
Due to changes in our networking policies, we are updating the internet access policy within our sandbox reservation instances.
Hosts will no longer have internet access outbound.
This should not affect the overall functionality or access to the resources within the sandbox instances, connecting via VPN.
DevNet Sandbox Team
When trying to use the nexus 9kv VIRL sandbox, the sandbox is accessed via the devnetsandbox-emea-gwy.cisco.com gateway. It looks like that gateway is not reachable. When using the basic nexus 9k sandbox, it looks like that one is accessed via the devnetsandbox-us-sjc.cisco.com gateway which is working. I need the 9kv VIRL sandbox, so is there any way to have that one made accessible via the sjc.cisco.com gateway, or can the emea-gwy.cisco.com gateway be fixed?
Hello, sorry for the difficulties.
I just checked and was able to reserve and VPN into the NX-OS on VIRL sandbox through Galway, so it could have been a point in time problem that you hit.
For making the NX-OS on VIRL sandbox available in SJC, we are looking at offering VIRL sandbox options out of SJC as well, keep an eye on the catalog.
What is the full URL you tried to connect to? In all reservable sandbox labs, the URL is appended with a 20XXX port number. This will be given in the email at the start of the reservation. We need the full URL to test your connection. Trying to connect to to "devnetsandbox-emea-gwy.cisco.com" via anyconnect will not work without the specific port.
Hello. Yes, it seems to be all of them. Here is mine currently:
Connecting to the above does not work. Conversely, connecting to the other US gateway I mentioned earlier works.
Thanks Joseph. We chatted last night over email. Its still not working for me. I have tried from the Cisco Dubai offices as well with no luck. My URL was
Have tested this again on both cisco and an external network and it connects ok.
Next step is to have a Webex to see exactly whats happening on the client side. I will reach out to you separately via email or Webex Teams.
Cisco - I ran Wireshark while attempting to connect to devnetsandbox-emea-gwy.cisco.com via the Anyconnect VPN client.
Packet capture shows successful 3 way TCP handshake between client and server. Then, client sends client hello message to server (TLS 1.2). Server sends back an ACK, and then no other packets. Client then sends a timeout TCP reset after 11 seconds. Looks like server is not responding to TLS handshake.