IOS XE on CSR Recommended Code AlwaysOn - Connection reset by peer

[grungelizard9]

Hello, I'm trying to connect to the IOS XE on CSR Recommended Code AlwaysOn sandbox via SSH and Netconf, but I'm getting "connection reset by peer".  Have not been able to connect since Sunday night.  Would it be possible to reset?  Thanks!

[bigevilbeard]

If you remove the netconf syntax from the device and re-add this back, it should clear the issue. Or sandbox-iosxe-latest-1.cisco.com is working as of now.

Hope this helps.

[grungelizard9]

Thanks bigevilbeard, I'm still unable to connect manually via SSH or with Netconf, but I'll keep digging.  As far as removing the netconf syntax from the device and re-adding, do you mean my device that's trying to reach the sandbox?  Thanks!

[bigevilbeard]

Arh right, i see its rejected all connections inc the UI - the eng team will need to reset this in the backend as its totally down. Guess use the other one for now then until this one is fixed up.

[grungelizard9]

I'm getting the error below when trying manually or via script on port 22 or 830, so just trying to be sure.  I'm able to SSH to other hosts as normal.

root@jinxies:~# ssh -v developer@sandbox-iosxe-recomm-1.cisco.com
OpenSSH_8.9p1 Ubuntu-3ubuntu0.1, OpenSSL 3.0.2 15 Mar 2022
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: include /etc/ssh/ssh_config.d/*.conf matched no files
debug1: /etc/ssh/ssh_config line 21: Applying options for *
debug1: Connecting to sandbox-iosxe-recomm-1.cisco.com [131.226.217.149] port 22.
debug1: Connection established.
debug1: identity file /root/.ssh/id_rsa type -1
debug1: identity file /root/.ssh/id_rsa-cert type -1
debug1: identity file /root/.ssh/id_ecdsa type -1
debug1: identity file /root/.ssh/id_ecdsa-cert type -1
debug1: identity file /root/.ssh/id_ecdsa_sk type -1
debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /root/.ssh/id_ed25519 type -1
debug1: identity file /root/.ssh/id_ed25519-cert type -1
debug1: identity file /root/.ssh/id_ed25519_sk type -1
debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /root/.ssh/id_xmss type -1
debug1: identity file /root/.ssh/id_xmss-cert type -1
debug1: identity file /root/.ssh/id_dsa type -1
debug1: identity file /root/.ssh/id_dsa-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.1
kex_exchange_identification: read: Connection reset by peer
Connection reset by 131.226.217.149 port 22
root@jinxies:~#

[zowu · Accepted solution]

we've just reloaded sandbox-iosxe-recomm-1.cisco.com. Please use the credential listed in lab instruction to access it.

Thanks, Bob

[grungelizard9]

Awesome!  Thanks much all.  Manual SSH tested good, will try Python once I get back to the house.

[farajassulai]

I had attempted to connect to  sandbox-iosxr-1.cisco.com. Here is the following info.

CSR1000V Host: sandbox-iosxe-recomm-1.cisco.com
SSH Port: 22
NETCONF Port: 830
RESTCONF Ports: 443 (HTTPS)
Username: developer
Password: lastorangerestoreball8876 

 when I attempted to connect from my local device no VM(REDHAT9) by using SSH, I got the following MSG "kex_exchange_identification: read: Connection reset by peer Connection reset
by 131.226.217.149 port 22." 

and I used the following cmd "ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 developer@sandbox-iosxe-recomm-1.cisco.com", but it did not work.

Can anyone modify the lab configuration and give me access?

I appreciate your cooperation. My best regards

Regards,

[bigevilbeard]

@farajassulai the error you see would suggest the sandbox is currently down/unreachable.

[farajassulai]

Thanks, Mr. Bigevilbeard, for replying to my query, when it will be available?

[bigevilbeard]

@farajassulai sadly I do not know that information. The Cisco team will need to advise