I have enabled xml agent on ASR9k:

#show run xml agent ssl
Tue May 20 22:19:11.791 UTC
xml agent ssl
 iteration off

When I try to connect to port 38752 it gets disconnected with connection reset

# openssl s_client -connect 
no peer certificate available
No client certificate CA names sent
SSL handshake has read 0 bytes and written 225 bytes
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE

How do I connect to the XML agent with SSL?

  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin
    Commented Aug 10, 2017 at 4:02

2 Answers 2


The router needs to generate a certificate that it can use to encrypt the communication. See the Cisco configuration guide chapter on "Implementing Secure Socket Layer" here: http://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r5-1/security/configuration/guide/b_syssec_cg51xasr9k/b_syssec_cg51xasr9k_chapter_01001.html


Cisco IOS XR XML API Guide, Cisco IOS XR Release 4.1

The k9sec package is required to use the SSL agent. The configuration is rejected during a commit when the k9sec package is not active on the system. When the k9sec package is deactivated after configuring the SSL agent, the agent is not available.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.