Hello Balaji,
I am following the above-mentioned tutorial. I used the following command to deploy rest api but I received 404 response. Command
curl -v -X POST https://192.168.0.15/api/v2/auth/token-services -H "Accept:application/json" -u "sachin:123456" -d "" --insecure -3
Warning: Ignores instruction to use SSLv3
Note: Unnecessary use of -X or --request, POST is already inferred.
* Trying 192.168.0.15:443...
* Connected to 192.168.0.15 (192.168.0.15) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/cert.pem
* CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN, server accepted to use http/1.1
* Server certificate:
* subject: CN=IOS-Self-Signed-Certificate-1335733482
* start date: Apr 12 18:15:25 2022 GMT
* expire date: Apr 11 18:15:25 2032 GMT
* issuer: CN=IOS-Self-Signed-Certificate-1335733482
* SSL certificate verify result: self signed certificate (18), continuing anyway.
* Server auth using Basic with user 'sachin'
> POST /api/v2/auth/token-services HTTP/1.1
> Host: 192.168.0.15
> Authorization: Basic c2FjaGluOjEyMzQ1Ng==
> User-Agent: curl/7.77.0
> Accept:application/json
> Content-Length: 0
> Content-Type: application/x-www-form-urlencoded
>
* Mark bundle as not supporting multiuse
< HTTP/1.1 404 Not Found
< Server: openresty
< Date: Tue, 12 Apr 2022 18:40:33 GMT
< Transfer-Encoding: chunked
< Connection: keep-alive
< Accept-Ranges: none
< X-XSS-Protection: 1; mode=block
< X-Content-Type-Options: nosniff
< X-Frame-Options: SAMEORIGIN
< Strict-Transport-Security: max-age=7884000
<
404 Not Found
Below is the configuration of the CSR.
R1#show running-config
Building configuration...
hostname r1
!
boot-start-marker
boot-end-marker
!
!
no logging console
enable password 123456
!
!
transport-map type persistent webui map1
secure-server
!
aaa new-model
!
!
aaa session-id common
!
!
ip domain name r1.example.com
!
!
!
login on-success log
!
!
subscriber templating
!
!
multilink bundle-name authenticated
!
!
crypto pki trustpoint TP-self-signed-1335733482
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1335733482
revocation-check none
rsakeypair TP-self-signed-1335733482
!
crypto pki trustpoint SLA-TrustPoint
enrollment pkcs12
revocation-check crl
!
!
license udi pid CSR1000V sn 9DKYG2RHNPT
diagnostic bootup level minimal
memory free low-watermark processor 71507
!
spanning-tree extend system-id
!
username sachin privilege 15 password 0 123456
!
redundancy
!
!
interface GigabitEthernet1
ip dhcp client client-id ascii cisco-5000.0001.0000-Gi1
ip address 192.168.0.17 255.255.255.0
negotiation auto
no mop enabled
no mop sysid
!
interface GigabitEthernet2
no ip address
negotiation auto
no mop enabled
no mop sysid
!
interface GigabitEthernet3
no ip address
negotiation auto
no mop enabled
no mop sysid
!
interface GigabitEthernet4
no ip address
negotiation auto
no mop enabled
no mop sysid
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http client source-interface GigabitEthernet1
!
ip ssh version 2
!
control-plane
!
line con 0
stopbits 1
line vty 0 4
transport input ssh
line vty 5 15
transport input ssh
transport type persistent webui input map1
call-home
email address to send SCH notifications.
contact-email-addr sch-smart-licensing@cisco.com
profile "CiscoTAC-1"
active
destination transport-method http
end
