« Back to Technical Questions

Missing netconf command on AXP service module

Combination View Flat View Tree View
Hi all,
 
I found some problem using netconf on AXP Service Module.
By refering to AXP Developer Guide, I can only manage to configure netconf on Cisco IOS Router but not on AXP. The followings are the printout of the problem:
 
AXP-X2# netconf ?
netconf 
^
% Invalid input detected at '^' marker.
AXP-X2# ?
  app-service       Application hosting environment exec commands
  broadcast         Broadcast a message
  clear             Reset functions
  configure         Enter configuration mode
  copy              Copy data from one location to another
  disable           Turn off privileged commands
  disk              Hotswap a failed drive
  echo              print the arguments
  enable            enter privileged mode
  erase             Erase a configuration
  exit              quit the cli
  help              Description of the interactive help system
  insert-line       Insert a line of text
  license           License information
  log               System event messages
  no                Negate a command
  ping              Send echo messages
  reload            Reboot the system
  show              Show running system information
  shutdown          Halt the system
  software          software
  techsupport       Generate debug related information for support
  terminal          Configure this session's terminal
  trace             Enable trace events for debugging
  write             Write running configuration to memory or terminal
  <cr>    
 
From above print-out, it seemed 'netconf' command was not available on AXP platform.
Question: Do I need to install any add-on module on AXP or Router ?
 
P.S > I am using Cisco router 2951/K9. IOS 15.0(1)M and AXP 1.6.1.
 
Regards,
Zoebir
 

Hi Zoebir,

We need to enter into the Cisco AXP configuration mode to configure the Network Configuration Protocol (NETCONF). Could you please try and let us know whether it works or not. If not let us know which module are you using in your case to check out in our local setup.

Thanks,
Anusha

Hi Zoebir, 
 
Please note that the netconf command is a configuration command.  So, you must enter "config t" in order to see it.
 

axp# netconf ?
netconf  
^
% Invalid input detected at '^' marker.
axp# config t
Enter configuration commands, one per line.  End with CNTL/Z.
axp(config)# netconf ?
  beep              Use BEEP transport (Blocks Extensible Exchange Protocol)
  max-sessions      Configure maximum netconf sessions
  ssh               Use SSH transport
axp(config)# netconf 


As a side note, please keep in mind that we recommend using Netconf over SSH as opposed to Netconf over BEEP.  It is a more secure and more reliable protocol.


Hope this helps,


-Carl

Hi Anusha and Carl,

** Even in configuration mode, netconf command is also not available.


AXP-X2(config)# ?
app-service Configure application hosting environment
cdp cdp config commands
clock software clock
end Exit from configure modes
exit Exit from the mode
help Description of the interactive help system
hostname set the system name
interface Configure networking interfaces
ip internet protocol
license Configure license features
line TTY line configuration
log System event messages
no delete configuration command
default Return a configuration value to its default
ntp Network Time Protocol
route-map Configure route map
service Modify service provided
snmp-server SNMP server
software software
syslog-server Start/Stop the syslog server
system Change system settings
test Experimental CLI's
username User description and account
<cr>

** Below are the packages installed on AXP service module.

AXP-X2# show software packages

Installed Packages:

- Installer (Installer application) (1.6.1.0)
- vserialapi (Remote Serial Device support) (1.6.1)
- axpsystemapi (AXP standard services(AXP SysInfo, SysOp, CLI API)) (1.6.1)
- eventapi (IOS Event API) (1.6.1)
- nfsclient (NFS Client) (1.6.1)
- AXP (Virtual Server Development System) (1.6.1)
- Infrastructure (Service Engine Infrastructure) (2.6.6.0)
- Global (Global manifest) (1.6.1)
- ios_mosipc (Cisco Multi-OS IPC support) (1.6.1.OMNI_TAHOE_MOS_20100421)
- iosapi (IOS CLI API) (1.6.1)
- cli_plugin (CLI Plugin bundle to allow custom CLI plugin) (1.6.1)
- axpos (AXP Reference OS) (1.6.1)
- GPL Infrastructure (Service Engine GPL Infrastructure) (2.4.6.0)
- Guest OS Environment (AXP Guest OS Environment (Legacy)) (1.6.1)
- Bootloader (Secondary) (Service Engine Bootloader) (2.1.29.0)
- Core (Service Engine OS Core) (2.6.6.0)
- ios_eemclient (IOS EEM Client Library) (EEM_AXP_T_BASE_1_20091204)
- timezone (Time Zone Definitions) (1.0.2009g.1)
- ios_snap (Structured Network API Support) (1.6.1.SNAP_REL_20100225)

Installed Plug-ins:

- app_dev (Application Debugging Add-on Package) (1.5.2)

** I was thinking if any add-on required ?

Regards,
Zoebir

Hi Zoebir,
 
It looks like there is not an application installed.  In order to see the netconf CLI in configuration mode, you should have an application installed which is dependent on vserial or iosapi.  Please package an application with this dependency, install it, and you should see the netconf CLI.
 
Hope this helps,
 
-Carl
 

Hi Carl,

Thanks for guide. I managed to see netconf CLI after installed an application with iosapi/vserial dependencies.

I failed to set up netconf ssh. I followed exactly Netconf setup in AXP Developer Guide.
By the way, I can not ssh from PC to router (wrong password, i set "cisco" as password for sysadmin) but I can telnet router from PC with same "cisco" password.

Question: Do I configure wrong on router ?

Below is the "show run" of Router and AXP:

Router
============================
Building configuration...


Current configuration : 1934 bytes
!
! Last configuration change at 08:57:12 UTC Thu Jun 23 2011
!
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router-X1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$gx9T$QArLduhmRr6.tqF9MFMVW/
!
no aaa new-model
!
!
!
!
!
!
no ipv6 cef
ip source-route
ip cef
!
!
!
!
ip domain name cisco.com
!
multilink bundle-name authenticated
!
!
!
!
!
voice-card 0
!
!
!
!
!
!
license udi pid CISCO2951/K9 sn FCZ1350721Q
hw-module sm 1
!
hw-module sm 2
!
!
!
username sysadmin password 7 060506324F41
username axp privilege 15 password 0 cisco
!
redundancy
!
!
ip ssh version 2
!
!
!
!
!
!
!
interface GigabitEthernet0/0
ip address 10.1.12.1 255.255.255.0
duplex auto
speed auto
!
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
!
interface GigabitEthernet0/2
ip address 8.8.8.1 255.255.255.0
duplex auto
speed auto
!
!
interface SM1/0
ip address 4.1.1.1 255.255.255.0
service-module ip address 4.1.1.2 255.255.255.0
!Application: Online on SME
service-module ip default-gateway 4.1.1.1
!
!
interface SM1/1
no ip address
!
!
interface GigabitEthernet2/0
ip address 6.1.1.1 255.255.255.0
!
!
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
!
!
!
!
!
nls resp-timeout 1
cpd cr-id 1
!
!
control-plane
!
!
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
password 7 01100F175804
login
line aux 0
line 67
no activation-character
no exec
transport preferred none
transport input all
transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
flowcontrol software
line 131
no activation-character
no exec
transport preferred none
transport input all
transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
flowcontrol software
line vty 0 4
password 7 030752180500
login
!
scheduler allocate 20000 1000
netconf ssh
end


AXP
===============================
Generating configuration:


clock timezone GMT

hostname AXP-X1

line console

system language preferred "en_US"

ntp server 10.0.0.20 prefer

software download server url "ftp://127.0.0.1/ftp" credentials hidden "6u/dKTN/hsEuSAEfw40XlF2eFHnZfyUTSd8ZZNgd+Y9J3xlk2B35j0nfGWTYHfmPSd8ZZNgd+Y9J3xlk2B35j0nfGWTYHfmPSd8ZZNgd+Y9J3xlk2B35j0nfGWTYHfmP"

log trace local enable
license agent max-sessions 9

no service password-encryption
no ip forward

interface eth0
ip address 4.1.1.2 255.255.255.0
exit

interface eth1
exit

interface mgf0
exit

ip ssh server

netconf ssh client 4.1.1.1 username axp password 7 BRz2a92aDMws4SVjn8bJEg==

username sysadmin password 7 $1$SXi1Ie2x$ewCBz1DmXsmDosybunYnN.

app-service bundling
bind interface eth0

hostname AXP-X1
exit

app-service dtn
bind interface eth0

hostname AXP-X1
exit

end


Regards,
Zoebir

Hi Zoebir,

To do a ssh from the PC to the router the following configs are enough

username axp_user privilege 15 password axp_pass
ip domain-name cisco.com
crypto key generate rsa modulus 1024
netconf ssh

To extend the ssh to the module as well we need the following config

On the Cisco AXP service module:
netconf ssh client 10.52.10.1 username axp_user password axp_pass

From the configs pasted in the forum found that the IP address in the netconf cli is not pointing to the router IP address. Instead of 4.1.1.1 it should point to the router IP address.

Also please check whether "060506324F41" is the correct encypted password for cisco. I tried using the normal and encrypted password, both telnet and ssh are working fine in our local setup.


Thanks,
Anusha

Hi Zoebir,

to ssh from PC to the router please add following config also.

line vty 0 4
login local

Thanks,
Raghavendra

Hi Anusha,

I am a bit confused on the IP address in netconf cli (at AXP CLI conf).
- 4.1.1.1 (sm1/0) is router side's IP address to connect Router and Service Module.
- 8.8.8.1 (g0/2) is just IP address for me to telnet from PC (development machine).
- 10.1.12.1 (g0/0) is WAN IP connecting to another set of Router+AXP.
- 6.1.1.1 (g2/0) is LAN IP connecting Router to EtherSwitch SM-ES3G-16-P (Inside Router).

Q: So which one should I used ?

Also, I standardised all password with "cisco". May I know how do I check the encrypted password (060506324F41) ?

Thanks for the valuables help.

Please advise.

Regards,
Zoebir

Hi Zoebir,

please see below config it should be router ip address not router side ip address.

netconf ssh client router ip/hostname username user password [0|7] password}

and for ssh, use login local for password checking, if your pasword is correct.
line vty 0 4
login local

hope this helps.

Thanks,
Raghavendra

Hi Anusha and Raghavendra,

Finally, the netconf ssh solved and I can use IOSAPI on AXP console.

The main problem is the ssh to router. The route ip address that I used (4.1.1.1) is correct.
The problem lied on "login local" which caused problem in ssh-ing from PC or from AXP to Router.

Thousand thanks to you all.

Please forgive any stupid questions that I had raised.
I am still novice.

Regards,
Zoebir

Hi All,

By the way, I still have some enquiries on the followings:
Q1) Session from Router to AXP is limited to one session ? Anyway to increase number of session ? My purpose is to login into same virtual instance on two terminals, which each will run a thread.

Q2) Way to ssh AXP from PC ? Directly through service module eth1 or indirectly through router ?

Currently, I am accessing virtual instance console in this way:
- telnet Router from PC
- under Router, use "service-module SM 1/0 session" into AXP
- under AXP, use "app-service <virtual instance name" then "connect console" into virtual instance's console
- under console3.2, manually run my application
But I found it is extremely slower in performance when I type command or the application printing out result such "ls -l" compared to I run same action on normal linux environment.
Q3) Any solutions to improve performance ?

Regards,
Zoebir

Hi Zoebir,

As far as I know for sessioning from Router to AXP it is limited to just one session. I don't think there are any ways for increasing the number of sessions but anyway I will check with our development team and get back to you in this regard. You could session into same virtual instances on different terminals using the SSH.

You can ssh AXP from PC with just configuring the netconf cli as I had mentioned earlier Make use of the router IP address 8.8.8.1 as per your configs.

When comparing to the normal linux environment there will be slight difference in performance.

Thanks,
Anusha