IOS-XR XML 代理 ssl

网络工程 cisco-ios-xr cisco-asr
2021-08-02 04:45:30

我在 ASR9k 上启用了 xml 代理:

#show run xml agent ssl
Tue May 20 22:19:11.791 UTC
xml agent ssl
 iteration off
!

当我尝试连接到端口 38752 时,它会因连接重置而断开连接

# openssl s_client -connect 10.104.56.84:38752 
CONNECTED(00000003)
write:errno=104
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 225 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
---

如何使用 SSL 连接到 XML 代理?

2个回答

路由器需要生成可用于加密通信的证书。请参阅此处有关“实施安全套接字层”的 Cisco 配置指南章节:http : //www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r5-1/security/configuration/guide /b_syssec_cg51xasr9k/b_syssec_cg51xasr9k_chapter_01001.html

Cisco IOS XR XML API 指南,Cisco IOS XR 版本 4.1

使用 SSL 代理需要 k9sec 包。当 k9sec 包在系统上不活动时,配置在提交期间被拒绝。配置SSL代理后k9sec包去激活时,代理不可用。