Solved: IOS XE on Cat8kv AlwaysOn-restconf issue-nginx returns 404

jefcorco · ‎12-22-2023

This sandbox is supposed to support netconf and restconf. SSH on port 22 and Netconf on port 830 are working but restconf on 443 is not. Using postman it appears that a nginx (reverse proxy?) is not forwarding the packets but returning a 404 NOT FOUND.

GET https://sandbox-iosxe-latest-1.cisco.com/.well-known/host-meta404

Warning: Unable to verify the first certificate

▶Network

▶Request Headers

Authorization: Basic Y2lzY286T2NzaW5zbw==

User-Agent: PostmanRuntime/7.35.0

Accept: */*

Postman-Token: e95c0d09-d83f-4178-88ef-096e3b0aa4af

Host: sandbox-iosxe-latest-1.cisco.com

Accept-Encoding: gzip, deflate, br

Connection: keep-alive

▶Response Headers

Server: nginx/1.13.12

Date: Thu, 21 Dec 2023 23:34:31 GMT

Content-Type: text/html

Content-Length: 170

Connection: keep-alive

▶Response Body

<html> <head><title>404 Not Found</title></head> <body bgcolor="white"> <center><h1>404 Not Found</h1></center> <hr><center>nginx/1.13.12</center> </body> </html>↵↵

bigevilbeard · ‎12-22-2023

@jefcorco I read in another thread that port 443 was temporarily removed for security reasons. Checking the listed open port for the sbx 443 is no longer listed https://devnetsandbox.cisco.com/DevNet/catalog/ios-xe-always-on

I would use the reserved one if you require 443 until this is added back.

hope this helps

Please mark this as helpful or solution accepted to help others
Connect with me https://bigevilbeard.github.io

View solution in original post

bigevilbeard · ‎12-22-2023

@jefcorco I read in another thread that port 443 was temporarily removed for security reasons. Checking the listed open port for the sbx 443 is no longer listed https://devnetsandbox.cisco.com/DevNet/catalog/ios-xe-always-on

I would use the reserved one if you require 443 until this is added back.

hope this helps

Please mark this as helpful or solution accepted to help others
Connect with me https://bigevilbeard.github.io

jefcorco · ‎12-22-2023

@bigevilbeard I had already moved on to the reserved one earlier today and that worked. I had used the always-on for restconf in the past and thought that it still mentioned it supported this in the sandbox description but I must have glossed over that.

I was looking for the "open port" list that you were talking about but didn't see it. Can you point me to that specifically for future reference?

Thanks for your help!

bigevilbeard · ‎12-23-2023

No problem - Under the instructions, you can find this info

Access Details:
Developers and network engineers access the IOS XE on Catalyst 17.11.x sandbox directly using the following information:

Cat8000v Host
Address: sandbox-iosxe-latest-1.cisco.com
Username: admin
Password: C1sco12345
NETCONF port: 830
gRPC telemetry port: 57500
ssh port: 22
Example Connection: ssh sandbox-iosxe-latest-1.cisco.com

Please mark this as helpful or solution accepted to help others
Connect with me https://bigevilbeard.github.io