Setting up Smart Licensing telnet to smartreciever.cisco.com on 443

[mmoulson2]

I am having problems getting a CSR8000v to talk to smart licensing. I'm running version 17.09.04a.

I am using the "default url" and the customer is saying they have allowed 443 to smartreciever.cisco.com

TAC are telling me I should be able to test access by using telnet to smartreciever.cisco.com on port 443.

However when I do that I just get:

telnet smartreceiver.cisco.com 443
Trying 2B05:A4C6:FFEE::F, 443 ...
% Destination unreachable; gateway or host down

I also tried this on another router on my network that is not locked down in terms of that it can talk to on the internet and the result is the same. Is this expected behaviour? When I tried to telnet to a web server on my local LAN that has port 80 open I can see the router returns "....Open"

Is there any other way I can test access?

Also is smartreceiver.cisco.com TCP 443 all that is required to be opened?

Thanks

[pieterh]

>>> the customer is saying they have allowed 443 to smartreciever.cisco.com <<<
+  >>> Trying 2B05:A4C6:FFEE::F, 443 ... <<<

looks like you are trying to access using IPv6 address
is this also what the customer has allowed ? or have they only allowed IPv4 ?

Name: smartreceiver.cisco.com
Addresses:
IPv6 2a04:e4c7:fffe::f
IPv4 146.112.59.81

[mmoulson2]

Hi @pieterh , I would guess the customer added the URL to their firewall and the firewall would probably resolve it using IPv4 but I am guessing!

In terms of what the router is doing.... I didn't ask it to telnet using IPv6, not sure if that is default behaviour? Or if there is a way to specify IPv4?

[mmoulson2]

OK so I just tried this:

ping smartreceiver.cisco.com
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 146.112.59.81, timeout is 2 seconds:
!!!!!

telnet 146.112.59.81 443
Trying 146.112.59.81, 443 ... Open
So it works when I use the IPv4 address! Let me try that on the customer device!

[pieterh]

you may need to specify the source address or interface used to telnet
     telnet 172.25.1.5 /source-interface loopback0
and you can specify a default source in the routers configuration
     ip http client source-interface Loopback0