IOS XE on CSR Recommended Code Always On credentials not working

[flippedbit0010]

IOS XE on CSR Recommended Code Always On

Access Details:

Developers and network engineers access the IOS XE on CSR Recommended Code Always On Sandbox directly using the following information:

• CSR1000V Host: sandbox-iosxe-recomm-1.cisco.com
  • SSH Port: 22
  • NETCONF Port: 830
  • RESTCONF Ports: 443 (HTTPS)
• Username: developer
• Password: lastorangerestoreball8876

These credentials are not working when attempting to connect to the IOS-XE CSR. 

Introduction to Model Driven Programmability (ex: NETCONF/YANG)

I'm also trying to work on this DevNet lab, and the credentials provided by these instructions are also not working:

Hands on: saying hello with SSH and NETCONF

Open a basic NETCONF session to a Sandbox IOS-XE router using the ssh command line utility.

1. In your local terminal, enter the following command to connect to the Sandbox IOS-XE router using SSH:

   ssh -oHostKeyAlgorithms=+ssh-dss developer@sandbox-iosxe-recomm-1.cisco.com -p 830 -s netconf

   The -oHostKeyAlgorithms=+ssh-dss parameter enables the SSH key algorithm needed, and -p 830 specifies the port the NETCONF agent is listening on.

2. Accept the SSL certificate and provide the password of C1sco12345.

3. You get the output that displays a lot of content scrolling past the screen as shown in the following example. This is the router saying "hello" to you. Most of the content is about the routers "capabilities". More on that in a bit.

   Please advise. Thanks

[bigevilbeard]

There is a few issues here. The works ok, but you need to add the following into your terminal

sudo vim /etc/ssh/ssh_config

You can add the last two lines under Host * remove anything else here and add the following two lines wq out and this should fix that issue.

Host *
    SendEnv LANG LC_*
HostkeyAlgorithms ssh-dss,ssh-rsa
KexAlgorithms +diffie-hellman-group1-sha1,diffie-hellman-group14-sha1

 For the learning lab, the password often get out of sync so always check the sandbox page for the latest. To get the learning lab updated create an issue here --> https://github.com/CiscoDevNet/learning-labs-issues

Hope this helps.

[flippedbit0010]

Thank you for responding - I'm actually trying to do this from a Windows terminal, not using a Linux subsystem or anything like that at the moment - just copied the NC-get-config.py from the repo and pasted into VS Code, then trying to execute the script to see the basic hello from the Always On router.  

[flippedbit0010]

Thanks for the suggestion, but this did not work for me, still seeing 'Permission denied." I'm trying both the C1sco12345 and the lastorangerestoreball8876 (this is the one in the lab guide) passwords.

ssh -oHostKeyAlgorithms=+ssh-dss developer@sandbox-iosxe-recomm-1.cisco.com -p 830 -s netconf
developer@sandbox-iosxe-recomm-1.cisco.com's password:
Permission denied, please try again.
developer@sandbox-iosxe-recomm-1.cisco.com's password:
Permission denied, please try again.
developer@sandbox-iosxe-recomm-1.cisco.com's password:

[bigevilbeard]

Looks like that one is down ATM i am logged into https://devnetsandbox.cisco.com/RM/Diagram/Index/7b4d4209-a17c-4bc3-9b38-f15184e53a94?diagramType=Topology

ssh admin@sandbox-iosxe-latest-1.cisco.com

This a test
(admin@sandbox-iosxe-latest-1.cisco.com) Password:

"Hello there! Hoping you are having a great day
... Welcome to 'csr8000v',
 your favorite CISCO.IOS.IOS Sandbox"



csr8000v#

[flippedbit0010]

Thanks! The NC-get-config.py script is working fine now that I have the correct authentication credentials. Much appreciated!

How were you able to determine the one I had been trying was down right now? 

[bigevilbeard]

Just via ssh, appears the developer user isn’t private level 15