SSH directly into devices in CML

[tony.curtis]

Is there any way to SSH into the CML labs?  I have tried using the external connector, but cannot connect to the IP address received over DHCP.  Any tips on direct connection?  Also, is it possible to connect directly to a console port, rather than use the WebUI.  I am looking to do some program testing in the sandbox.

[bigevilbeard]

If you have enabled SSH on the router/switch - once connected on the VPN you should be able to SSH directly to your network devices. Hope this helps.

[roger perkin]

I am also trying to do this but am missing something? 

CSR connected to external connector 

Gi4 picks up a DHCP address 

Enable username / ssh 

If I try to connect to this 192.168.255.x address it fails 

When I use the default lab all the connectivity goes to 10.10.20 address but can't figure how it's been setup?

[ianbirchall · Accepted solution]

I believe the solution is to set the external connector to Bridged mode, rather than NAT. 
If you use DHCP this should give your IOS device inside CML an IP address within the same range as your CML VM. 

In my instances CML VM is 192.168.144.50 and DHCP gave my IOS 192.168.144.59. 
You most likely should be able to ping both IPs from your windows machine at this point.

From there you can now pretty much set up SSH as you normally would on a device. 
hostname HST
ip domain-name DMN.com,
username ME priv 15 sec UBER,
crypto key gen rsa mod 2048
vty line 0 4
 transport input ssh
 login local

Then test. It should work. 

[GlenGTR]

Hi @ianbirchall I tried your solution but it didnt work for me (event tried static IP). Any other ideas? Thanks.

[Harold Ritter]

Hi @GlenGTR ,

You can also try this new feature.

https://www.youtube.com/watch?v=-VkZDiqkDGE

Regards,

[GlenGTR]

Thanks for that suggestion @Harold Ritter but it seems I need to access the CML cockpit to enable that functionality. I don't know the login details for the CML cockpit and my guess is that users cant access it within the free Sandbox environments? 

[GlenGTR]

I managed to get my External Connector working! Just in case anyone is in the same situation as me I found that I had connectivity between the CSR1000V router (within CML) and my computer after they had been on for just over 5 hours. Very weird... I know.

This was for the CML SD-WAN 20.12 free lab which is running version 2.5.1+build.10. 

[ianbirchall]

@GlenGTR  Out of curiousity, when you are stactically assigning the IOS device with an IP, can it ping the CML VM? 
And if you have another VM in the same subnet/vlan can that SSH to the IOS 

Basically im curios if there is an issue with the bridged connection between your physical machine and the VM (likely meaning the bridged connection between Physical and VM giving you an issue. Or if it is an issue on the VM side and settings within CML. 

[saul.bipa]

I can ping to the cisco routers on CML but I can't ssh. and Here i was, also thinking the same way.