IOSXE on CSR sandbox - no outside connectivity for labs (Guestshell/YANG)

[alael]

I'm working my way through the EN Networking path (sorry, I come from a development background more so than network) and trying to get the guestshell set up in my sandbox environment.  The router itself will not ping 8.8.8.8 or resolve names as it appears to have no outside connectivity, but the subsequent labs rely on the guestshell having nano and git installed via yum, with no special instructions related to connectivity.

Am I missing something in my config or is this intentional.  I found a post from 2019 saying that the sandboxes have no internet connectivity, but why would the labs be written assuming you do have them while pointing you to an environment where you do not?

[bigevilbeard · Accepted solution]

Hello @alael this is expect behaviour, there is no outside/internet access by design for security policy. The ENG team are always looking at ways to open up access, utilising AMP, Umbrella etc. It’s a question of balancing the security posture with the requirements. If you are using a reserved based sandbox the learning content should note the required tools can be found on the devbox for the environment

Hope this helps.

[alael]

This module (Introduction to Guest Shell in EN Networking) makes no mention of using local or cached resources.  It has examples using Yum over the open internet (a -C switch would be needed for cached resources).  The module also makes no mention that there is no internet access in the sandbox, that I could see, which would have been really nice to point out directly.

[bigevilbeard]

Thanks @alael from this module https://developer.cisco.com/learning/modules/net_app_hosting - "Introduction to the Guest Shell" is this the content you are referring too please?

Thanks!

[alael]

Yes, that is the content.  Page 4 specifically.

[bigevilbeard]

Thanks @alael as this not related to the sandbox, i have opened this case for the team to check the learning lab for this reference https://github.com/CiscoDevNet/learning-labs-issues/issues/288

Thank you for reporting this.