ios-xe-mgmt.cisco.com lab erorr

[yangcharlie]

Hello, All,

I have been working on a couple of Devnet Lab, and found not request responses from ios-xe-mgmt.cisco.com

in all the labs neither Postman nor Python requests.

Below is an example when I am working on "Exploring IOS XE YANG Data Models with RESTCONF"

1, I was able to open Sandbox, but no any elements showed in SanDbox ENVIRONMENT

the IOS XE on CSR Recommended Code Always-On Sandbox. 

2, updated environment on Postman with new parameters and no response from sandbox,

please see attached pics.

thanks

[bigevilbeard]

Hello, sorry to hear you are experiencing an issue here. Can you ssh to the IOS XE device ok and login etc..

Thanks!

[yangcharlie]

Hello,

Thanks for your message. By following module "Exploring IOS XE YANG Data Models with NETCONF“step 1
I am still seeing a similar issue as what I reported, log as below

(venv) devnet@devnet-virtual-machine:~/dnav3-code/intro-mdp/netconf$ python -i get_interface_list.py
Opening NETCONF Connection to ios-xe-mgmt.cisco.com
Exception: Error reading SSH protocol banner
Traceback (most recent call last):
File "/home/devnet/dnav3-code/venv/lib/python3.6/site-packages/paramiko/transport.py", line 2211, in _check_banner
buf = self.packetizer.readline(timeout)
File "/home/devnet/dnav3-code/venv/lib/python3.6/site-packages/paramiko/packet.py", line 380, in readline
buf += self._read_timeout(timeout)
File "/home/devnet/dnav3-code/venv/lib/python3.6/site-packages/paramiko/packet.py", line 622, in _read_timeout
raise socket.timeout()
socket.timeout

for both SSH took very long time to wait for output ( 5 + minutes), I cancelled.
(venv) devnet@devnet-virtual-machine:~/dnav3-code/intro-mdp/netconf$ ssh -oHostKeyAlgorithms=+ssh-dss developer@ios-xe-mgmt.cisco.com -p 10000 -s netconf
^C
(venv) devnet@devnet-virtual-machine:~/dnav3-code/intro-mdp/netconf$ ssh developer@ios-xe-mgmt.cisco.com -p 10000 -s netconf
^C

Please advise.

Thanks









I

[bigevilbeard]

Are you sure you can reach the sandbox / XE device?

stuaclar$ ssh developer@ios-xe-mgmt.cisco.com -p 10000 -s netconf
The authenticity of host '[ios-xe-mgmt.cisco.com]:10000 ([64.103.37.51]:10000)' can't be established.
RSA key fingerprint is SHA256:fwDKi3fxj54QQ1VROiJQMPDIAYYmtbkf7USoOD5nX6E.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '[ios-xe-mgmt.cisco.com]:10000,[64.103.37.51]:10000' (RSA) to the list of known hosts.
developer@ios-xe-mgmt.cisco.com's password:
<?xml version="1.0" encoding="UTF-8"?>
<hello xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
<capabilities>
<capability>urn:ietf:params:netconf:base:1.0</capability>
<capability>urn:ietf:params:netconf:base:1.1</capability>

[removed] 

</capabilities>
<session-id>188</session-id></hello>]]>]]>^C
real	0m5.913s
user	0m0.012s
sys	0m0.012s

Testing with the same command you used, i cannot see an issue here.

[yangcharlie]

Hello,

Thank for your reply. Here is a screenshot to access IOS-XE from my laptop.

Regards

[bigevilbeard]

Hello, sorry i was not clear here. I mean access to the device `ios-xe-mgmt.cisco.com`

Thanks!

[yangcharlie]

Hello,

I searched online and found 2 sandboxes for IOS XE, which are 

https://devnetsandbox.cisco.com/RM/Diagram/Index/27d9747a-db48-4565-8d44-df318fce37ad?diagramType=Topology

https://devnetsandbox.cisco.com/RM/Diagram/Index/38ded1f0-16ce-43f2-8df5-43a40ebf752e?diagramType=Topology

even both of them are 'always on' and VPNless, however, I was not able to query through my laptop. For device perspective, I do not see any device in sandboxes.

Only seeing the device in a reservable Sandbox

https://devnetsandbox.cisco.com/RM/Diagram/Index/cae403c2-27af-4c7d-b1e1-99b7d42f1504?diagramType=Topology

Really confused.

Thanks

[zowu]

The 2 "AlwaysOn" sandbox hosts CSR1000v with different firmware version, and you can find access details in the left "Instruction" panel.

[yangcharlie]

Hello,

That's something confused me, I do not see any device on IOS XE "alway on" sandboxes according to the url provided.

I can access sandboxes without a problem, however, no SSH via netconf at all.

Thanks

[bigevilbeard]

You can use the folllowing links

https://devnetsandbox.cisco.com/RM/Diagram/Index/38ded1f0-16ce-43f2-8df5-43a40ebf752e?diagramType=Topology

https://devnetsandbox.cisco.com/RM/Diagram/Index/27d9747a-db48-4565-8d44-df318fce37ad?diagramType=Topology

Access to one of these would be as follows

(venv) STUACLAR-M-R6EU:~ stuaclar$ ssh developer@ios-xe-mgmt.cisco.com -p 8181
Password:

Welcome to the DevNet Sandbox for CSR1000v and IOS XE

The following programmability features are already enabled:
  - NETCONF
  - RESTCONF

Thanks for stopping by.



csr1000v#

(venv) STUACLAR-M-R6EU:~ stuaclar$ ssh developer@ios-xe-mgmt.cisco.com -p 10000 -s netconf
developer@ios-xe-mgmt.cisco.com's password:
<?xml version="1.0" encoding="UTF-8"?>
<hello xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
<capabilities>
<capability>urn:ietf:params:netconf:base:1.0</capability>
<capability>urn:ietf:params:netconf:base:1.1</capability>
<capability>urn:ietf:params:netconf:capability:writable-running:1.0</capability>
<capability>urn:ietf:params:netconf:capability:xpath:1.0</capability>
<capability>urn:ietf:params:netconf:capability:validate:1.0</capability>
[removed]
<capability>urn:ietf:params:netconf:capability:validate:1.1</capabilit
<capability>urn:ietf:params:xml:ns:yang:ietf-netconf-with-defaults?module=ietf-netconf-with-defaults&amp;revision=2011-06-01</capability>
<capability>

If you cannot access these devices, please check your outbound firewall for the ports listed per sandbox (such as 8181 for ssh).

Hope this helps

[yangcharlie · Accepted solution]

Hello, All,

I am so sorry to waste your time on this bug.

What I found that my network policy blocked the ssh access to the sandbox, after moved to another laptop with a different connection, all work now.

Thanks

[ryno.robile1]

Hi

I had the exact same error, all i had to do is disable SSL certificate verification under Postman settings.

just an FYI if anybody else run into this.

[mocrodri]

In Postman I got 'Error: self signed certificate' when I click on 'send' button.

Disabling the SSL certificate in Posman helped.
To disable it:
File > Setting > General
Look for 'SSL certificate validation' and then turn it off.

Thanks,

[sameh_alfy]

I can't access any SSH or any device. Note that I'm still new to sandbox.

[bigevilbeard]

Please advise how you are trying/testing - thank you.