virl/cml util access: VIRL_HOST

[spencera]

I've been using the CML sandbox with the web interface but want to remotely access the simulation.  What is the sandbox host?  The sandbox is accessed via the web at 10.10.20.161 and I've given IPs to the nodes in the simulation (like 192.168.1.x and 172.16.x.x) but I can only access them through the HTML interface (after connecting w/ AnyConnect) but can't ping these from a command (or WSL) prompt on my laptop.  What do I need to do to use cml utils?

[bigevilbeard]

@spencera here the link to cml utils - https://developer.cisco.com/codeexchange/github/repo/CiscoDevNet/virlutils/ it contains the guide to getting started and set up.

Hope this helps.

[spencera]

Thanks; That matches the video that Hank made several years ago & I tried the .virlrc but I still can't connect from my laptop.  I'm using the CML sandbox and after the sandbox is ready I can connect w/ AnyConnect and successfully  connect to the Cisco Modeling Labs Server (10.10.20.161) via http but can't ping or ssh.  After I connect w/ AnyConnect am I supposed to use a VIRL_HOST of 10.10.20.161, or  a the ip of one of my devices?  I can access a device in the Network Devices tab (e.g. 10.10.20.179:22, so do I need the change the .rc file for each device in my config?

[bigevilbeard]

@spencera in this case i believe you run the util from the local devbox within the sandbox - not your local machine, i have done this in the past when it was virlutils. Hope this helps

[Oussama SLIMANE]

Hello @bigevilbeard , 

It doesn't work even from the devbox

Regards.

[kkhlebop]

The issues you are experiencing could be by design; some features are tightened with security. For example, pinging from outside the lab into most of the devices is not allowed, however pinging from within the lab is allowed. The best way to go about it is this: connect via SSH or RDP into a Linux or Windows host and then use the utilities on those hosts to access the rest of the sandbox.

[spencera]

Yes kkhlebop correct; I think I have a more basic problem.  I can get to the pre-configured network devices listed but can't putty to reach the devices on the simulated network topology I created. Could there just be a routing conflict between my laptop and the 1918 addresses I configured for my simulation?  What are the recommended/guidance for assigning addresses for devices?  I ultimately want to use WSL (but starting out with just a windows cmd). TIA

[Oussama SLIMANE]

Hello,

I have same issue. I'am trying to connect with virlutils to the virl server "from the devbox" but I get the the following error "CERTIFICATE_VERIFY_FAILED" please see the screen shot. 

My virlrc file is filed with credential that I got from the Sandbox

@bigevilbeard Please help.

Regards

[bigevilbeard]

@Oussama SLIMANE the error message you're seeing indicates that your system cannot verify the authenticity of the SSL certificate presented by the VIRL server (10.10.20.161).

The command output suggests trying virl --debug to gather more detailed information about the error. This might provide additional clues to pinpoint the exact cause.

Since this was first posted back in 2021 and sometime has passed I am mot current on the issue or support here for this tool in the sandbox. Would suggest to open a support request with the devnet team https://community.cisco.com/t5/devnet-sandbox/bd-p/4426j-disc-dev-devnet-sandbox create an issue with maintainers at https://github.com/CiscoDevNet/virlutils

Hope this helps.