Configure guestshell on Cisco CSR 1000V

1. Enable IOx

haifeli-csr1000v#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
haifeli-csr1000v(config)#iox
haifeli-csr1000v(config)#end
haifeli-csr1000v#wr
Building configuration...
[OK]

2. Confirm IOx status

We can see IOx service (IOxman): Not Ready.

haifeli-csr1000v#show iox-service 

IOx Infrastructure Summary:
---------------------------
IOx service (CAF) 1.8.1.7  : Running
IOx service (HA)          : Not Supported 
IOx service (IOxman)      : Not Ready 
Libvirtd   1.3.4          : Running

This may take a few minutes.

haifeli-csr1000v#sh iox

IOx Infrastructure Summary:
---------------------------
IOx service (CAF) 1.8.1.7  : Running
IOx service (HA)          : Not Supported 
IOx service (IOxman)      : Running 
Libvirtd   1.3.4          : Running

3. Configure port

If the port is not configured correctly, the following error message may appear.

haifeli-csr1000v#guestshell
The process for the command is not responding or is otherwise unavailable

Error, guestshell is in disabled state, execute 'guestshell enable' before attempting this CLI

haifeli-csr1kv(config)#int virtualportGroup 0
haifeli-csr1kv(config-if)#ip add
haifeli-csr1kv(config-if)#ip address 192.168.2.1 255.255.255.0
haifeli-csr1kv(config-if)#ip nat inside
haifeli-csr1kv(config)#end
haifeli-csr1kv#show ip int brief 
Interface              IP-Address      OK? Method Status                Protocol
GigabitEthernet1       10.124.53.53    YES other  up                    up      
GigabitEthernet2       100.100.100.2   YES other  up                    up      
GigabitEthernet3       unassigned      YES unset  administratively down down    
VirtualPortGroup0      192.168.2.1     YES manual up                    up      
haifeli-csr1kv#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
haifeli-csr1kv(config)#int gigabitEthernet 1
haifeli-csr1kv(config-if)#ip nat outside 
haifeli-csr1kv(config-if)#exit
haifeli-csr1kv(config)#ip access-list standard NAT
haifeli-csr1kv(config-std-nacl)#permit 192.168.0.0 2 0.0.255.255
haifeli-csr1kv(config-std-nacl)#exit
haifeli-csr1kv(config)#ip nat inside source list NAT interface gigabitEthernet 1 overload
haifeli-csr1kv(config)#end
haifeli-csr1kv#wr
Building configuration...
[OK]

4. Enable guestshell

After configuring the port, you may still be unable to enable guestshell.

haifeli-csr1kv#guestshell enable 
Interface will be selected if configured in app-hosting
Please wait for completion
% Error: No interface configuration for guestshell

haifeli-csr1kv(config)#app-hosting appid guestshell
haifeli-csr1kv(config-app-hosting)#vnic management guest-interface 0
haifeli-csr1kv(config-app-hosting)#end
haifeli-csr1kv#guestshell enable 
Interface will be selected if configured in app-hosting
Please wait for completion
guestshell activated successfully
Current state is: ACTIVATED
guestshell started successfully
Current state is: RUNNING
Guestshell enabled successfully

5. Verification

haifeli-csr1kv#
haifeli-csr1kv#guestshell run python
Python 2.7.5 (default, Jun 17 2014, 18:11:42) 
[GCC 4.8.2 20140120 (Red Hat 4.8.2-16)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> 
>>> 
Use exit() or Ctrl-D (i.e. EOF) to exit
>>> 
haifeli-csr1kv#
haifeli-csr1kv#
haifeli-csr1kv#guestshell run bash
[guestshell@guestshell ~]$ 
[guestshell@guestshell ~]$ 
[guestshell@guestshell ~]$ 
[guestshell@guestshell ~]$ cd /flash
[guestshell@guestshell flash]$ 
[guestshell@guestshell flash]$ 
[guestshell@guestshell flash]$ cat haifeng.py