ISR 4331 Router Smart License Registratin Call-Home failed

[SaintEvn]

We've registered ISR 4331 Router with Smart Licensing .
We created smart token and put it in our Router but it failed and show the following error.

Registration: Status: REGISTERING - REGISTRATION IN PROGRESS Export-Controlled Functionality: NOT ALLOWED Initial Registration: FAILED on Aug 26 15:46:11 2020 Failure reason: Fail to send out Call Home HTTP message. 

 Our ISR 4331 router have internet connectivity.Can you guys please help me with this ? What should I do now ?
we cannot ping tools.cisco.com and also cannot telnet tools.cisco.com with 443.

[balaji.bandi]

First i will check are you able to resolve :

nslookup tools.cisco.com - is this works ?

try ip address https://x.x.x.x - see is that works ? also try https://tools.cisco.com - is this works ?

[SaintEvn]

Hi,
If it's was from Router CLi , no it can't be resolved.
If it was from the computer that connects to the router, it is resolved .
And I can't also ping tools.cisco.com from ISR first.But after I've added "ip host tools.cisco.com 173.37.145.8"
it can ping now.
I've also tried "telnet tools.cisco.com 443" but it is not work.

[balaji.bandi]

Looks like Device is not resolving the DNS entries.

before trying to register with smartlicense server, try from device

1. you able to ping tools.cisco.com

2. Make sure your  ACL allow Port 443 to connect cisco

3. try telnet tools.cisco.com 443 ( you need to allow in VTY lines use telnet)

below guide for reference :

https://www.cisco.com/c/en/us/td/docs/routers/access/4400/software/configuration/guide/isr4400swcfg/isr4400swcfg_chapter_010011.html

[SaintEvn]

The following is my call-home config

call-home
contact-email-addr sch-smart-licensing@cisco.com
profile "CiscoTAC-1"
active
destination transport-method http
no destination transport-method email
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService

I've also tried with this command "ip http client source-interface g0/0/1"
But still it is not work

[Nithin Eluvathingal]

Check if you have configure Dns and domain name on your 4331 router. 

[SaintEvn]

Hi,
I've configured the following config
ip name-server 8.8.8.8  8.8.4.4
Anything wrong with my configuration?

[Nithin Eluvathingal]

ip domain name cisco.com>> why do u use cisco.com ? use your client domain. 

[Richard Burts]

I agree that the symptoms suggest that there is an issue with DNS. The name servers you have configured seem appropriate. Unless you really are in the Cisco network I would not use this command

ip domain name cisco.com

Perhaps if you post your complete config (obscuring sensitive information such as Public IP and passwords) we might find some issue.

[SaintEvn]

Hi,
cisco.com is just an example point.
we don't have proper name server .
ip name-server 8.8.8.8 8.8.4.4
ip domain name example.com
Sorry for for my incomplete information . I'll upload all my config

[SaintEvn]

sr

[SaintEvn]

Plese see the attachment file for my Router Config.

Thank you so much all  for the help. 

[Richard Burts]

It appears that what you have posted is only part of the configuration. I see what appears to be 2 outside interfaces and 1 inside interface. I do not see any configuration of address translation. I do not see any configuration about routing. I do not know if the configuration has any security policies (acl, etc) which impacts traffic. Without knowing these things how can we give any good advice?

[balaji.bandi]

Please can you confirm the test i have asked to conduct.

Also please confirm, is this router directly connected to internet (or ISP) or is there any Devices in the path ?

Also observed that he device do not have  route to go out ?

[SaintEvn]

I'll get back to you as soon as I finished testing tomorrow.
Thank you so much all .