439 lines
13 KiB
Django/Jinja
439 lines
13 KiB
Django/Jinja
{% macro systemsection(device,root_pw,users,syslog_servers,ntp_servers,tacacs_servers) %}
|
|
system {
|
|
host-name {{ device.name }};
|
|
{% if tacacs_servers %}
|
|
authentication-order [ tacplus password ];
|
|
{% endif %}
|
|
root-authentication {
|
|
encrypted-password "{{ root_pw }}"; ## Client Higher
|
|
}
|
|
{% if tacacs_servers %}
|
|
tacplus-server {
|
|
{% for server, details in tacacs_servers %}
|
|
{{ server }} {
|
|
port 49;
|
|
secret "{{ details['secret'] }}"; ## SECRET-DATA
|
|
source-address {{ device.primary_ip4.address.ip }};
|
|
}
|
|
{% endfor %}
|
|
}
|
|
{% endif %}
|
|
login {
|
|
class sysadmin {
|
|
permissions [ admin clear configure control firewall-control interface interface-control network reset rollback routing routing-control snmp snmp-control trace-control view view-configuration ];
|
|
}
|
|
{% for user, details in users|dictsort %}
|
|
user {{ user }} {
|
|
uid 200{{ loop.index }};
|
|
class {{ details['role'] }};
|
|
{% if details['password'] %}
|
|
authentication {
|
|
encrypted-password "{{ details['password'] }}"; ## SECRET-DATA
|
|
}
|
|
{% endif %}
|
|
}
|
|
{% endfor %}
|
|
}
|
|
services {
|
|
{% if device.role.name in ['Leaf','Spine'] %}
|
|
ssh;
|
|
{% else %}
|
|
ssh {
|
|
root-login deny;
|
|
}
|
|
{% endif %}
|
|
}
|
|
syslog {
|
|
{% for server in syslog_servers %}
|
|
host {{ server }} {
|
|
any notice;
|
|
authorization info;
|
|
{% if device.role.name in ['Leaf','Spine'] %}
|
|
match "!(.*DH_SVC_SENDMSG_FAILURE.*|.*UI_.*|.*shmlog: unable to create argtype.*|.*DEBUG: PAM_USER.*|.*DEBUG: PAM_ACTUAL_USER.*|.*SNMPD_AUTH_FAILURE.*|.*/usr/sbin/cron.*|.*jl2tpd.*|.*dfcd.*|.*l2ald.*|.*cc_mic_sfp_is_present.*|.*RMOPD_ICMP_SENDMSG_FAILURE.*|.*acx_vpls_mesh_grp_get_info.*|.*last message repeated.*|.*Refreshing mastership.*|.*hw.chassis.startup_time update.*)";
|
|
facility-override local6;
|
|
{% endif %}
|
|
}
|
|
{% endfor %}
|
|
file interactive-commands {
|
|
interactive-commands any;
|
|
}
|
|
{% if device.role.name in ['Leaf','Spine'] %}
|
|
file linkupdown {
|
|
any info;
|
|
match "LINK_DOWN|LINK_UP";
|
|
}
|
|
file messages {
|
|
any notice;
|
|
authorization info;
|
|
}
|
|
{% endif %}
|
|
}
|
|
{% if ntp_servers|length > 0 %}
|
|
ntp {
|
|
{% for server in ntp_servers %}
|
|
server {{ server }};
|
|
{% endfor %}
|
|
}
|
|
{% endif %}
|
|
}
|
|
{%- endmacro %}
|
|
|
|
|
|
{% macro chassissection(device,breakout_ports) %}
|
|
chassis {
|
|
{% if device.interfaces.all()|selectattr('type','eq','lag')|list|count > 0 %}
|
|
aggregated-devices {
|
|
ethernet {
|
|
device-count {{ device.interfaces.all()|selectattr('type','eq','lag')|list|count }};
|
|
}
|
|
}
|
|
{% endif %}
|
|
{% if breakout_ports %}
|
|
{% for fpc, fpcdata in breakout_ports.items() %}
|
|
fpc {{ fpc }} {
|
|
{% for pic, picdata in fpcdata.items() %}
|
|
pic {{ pic }} {
|
|
{% for port, speed in picdata.items() %}
|
|
port {{ port }} {
|
|
channel-speed {{ speed }};
|
|
}
|
|
{% endfor %}
|
|
}
|
|
{% endfor %}
|
|
}
|
|
{% endfor %}
|
|
{% endif %}
|
|
{% if device.role.name in ['Provider Core'] %}
|
|
forwarding-options {
|
|
lpm-profile;
|
|
}
|
|
{% endif %}
|
|
}
|
|
{%- endmacro %}
|
|
|
|
|
|
{% macro interfaceconfig(interface,rack = None) -%}
|
|
{% if not ('-' in interface.name) or interface.description or interface.lag or interface.ip_addresses.count() or interface.connected_endpoints or interface.mode or interface.tagged_vlans.all() or interface.untagged_vlan %}
|
|
{{ interface.name }} {
|
|
{% if interface.description %}
|
|
description "{{ interface.description }}";
|
|
{% endif %}
|
|
{% if interface.mtu and not interface.lag %}
|
|
mtu {{ interface.mtu }};
|
|
{% endif %}
|
|
{% if interface.device.role.name in ['Provide Core'] %}
|
|
flexible-vlan-tagging;
|
|
native-vlan-id 1;
|
|
encapsulation flexible-ethernet-services;
|
|
{% endif %}
|
|
{% if interface.lag %}
|
|
ether-options {
|
|
802.3ad {{ interface.lag.name }};
|
|
}
|
|
{% endif %}
|
|
{% if interface.name.startswith('ae') %}
|
|
{% if interface.custom_field_data['esi_lag'] %}
|
|
esi {
|
|
auto-derive {
|
|
lacp;
|
|
}
|
|
all-active;
|
|
}
|
|
{% endif %}
|
|
aggregated-ether-options {
|
|
lacp {
|
|
periodic fast;
|
|
{% if interface.custom_field_data['system_id'] %}
|
|
system-id {{ interface.custom_field_data['system_id'] }};
|
|
{% elif interface.custom_field_data['esi_lag'] %}
|
|
system-id 00:00:{{ '%02d' % rack|int }}:{% if interface.name[2:]|int < 99 %}{{ '%02d' % interface.name[2:]|int }}{% else %}{{ '%02x' % interface.name[2:]|int }}{% endif %}:00:01;
|
|
{% endif %}
|
|
}
|
|
}
|
|
{% endif %}
|
|
{% if interface.ip_addresses.count() > 0 %}
|
|
unit 0 {
|
|
{% if (interface.connected_endpoints) and (interface.connected_endpoints[0].device.role.name == 'Provider Core') %}
|
|
vlan-id 1;
|
|
{% endif %}
|
|
family inet {
|
|
{% if interface.ip_addresses.first().status == 'reserved' %}inactive: {% endif %}address {{ interface.ip_addresses.first().address }};
|
|
}
|
|
}
|
|
{% endif %}
|
|
{% if interface.device.role.name in ['Leaf','Spine'] %}
|
|
{% if interface.mode != '' %}
|
|
unit 0 {
|
|
family ethernet-switching {
|
|
{% if interface.mode=='ACCESS' %}
|
|
interface-mode access;
|
|
vlan {
|
|
members {{ interface.untagged_vlan.vid }};
|
|
}
|
|
{% elif interface.mode=='TAGGED' %}
|
|
interface-mode trunk;
|
|
vlan {
|
|
members [ {% for vlan in interface.tagged_vlans %}{{ vlan.vid }} {% endfor %}];
|
|
}
|
|
{% elif interface.mode=='TAGGED_ALL' %}
|
|
interface-mode trunk;
|
|
vlan {
|
|
members [ all ];
|
|
}
|
|
{% endif %}
|
|
storm-control default;
|
|
}
|
|
}
|
|
{% elif interface.device.role.name in ['Provider Core'] and interface.connected_endpoints %}
|
|
{% if interface.connected_endpoints[0].device.role.name in ['Provider Edge'] %}
|
|
{% for vlan in interface.tagged_vlans %}
|
|
unit {{ vlan.vid }} {
|
|
encapsulation vlan-vpls;
|
|
vlan-id {{ vlan.vid }};
|
|
}
|
|
{% endfor %}
|
|
{% endif %}
|
|
{% endif %}
|
|
{% endif %}
|
|
}
|
|
{% endif %}
|
|
{%- endmacro %}
|
|
|
|
{% macro interfacesection(device,vlans) %}
|
|
interfaces {
|
|
{% if device.role.name in ['Provider Core'] %}
|
|
interface-range core-mpls {
|
|
{% for interface in device.interfaces.filter(cable__isnull=False) %}
|
|
{% if interface.connected_endpoints and interface.connected_endpoints[0].device.role.name in ['Provider Core'] %}
|
|
member {{ interface }};
|
|
{% endif %}
|
|
{% endfor %}
|
|
unit 0 {
|
|
family inet;
|
|
family mpls;
|
|
}
|
|
}
|
|
{% endif %}
|
|
{# Physical interfaces should be sorted by FPC/PIC/Port value - that's a challenge to do in Jinja so we cheat for now by putting the xe- interfaces first. This won't work for all devices! #}
|
|
{% for interface in device.interfaces.filter(name__contains='-')|j2_natsort(attribute="name") %}
|
|
{{- interfaceconfig(interface) }}
|
|
{% endfor %}
|
|
{% for interface in device.interfaces.filter(name__startswith='ae') %}
|
|
{{ interfaceconfig(interface,device.rack.name[5:]) }}
|
|
{% endfor %}
|
|
{% for interface in device.interfaces.filter(name__exact='em0') %}
|
|
{{ interfaceconfig(interface) }}
|
|
{% endfor %}
|
|
{% for interface in device.interfaces.filter(name__startswith='irb') %}
|
|
{% if loop.first %}
|
|
irb {
|
|
{% endif %}
|
|
unit {{ interface.name[4:] }} {
|
|
description "{{ interface.description }}";
|
|
family inet {
|
|
{% if interface.ip_addresses.first().status == 'reserved' %}inactive: {% endif %}address {{ interface.ip_addresses.first().address }};
|
|
}
|
|
}
|
|
{% if loop.last %}
|
|
}
|
|
{% endif %}
|
|
{% endfor %}
|
|
{% for interface in device.interfaces.filter(name__startswith='lo') %}
|
|
{{ interfaceconfig(interface) }}
|
|
{% endfor %}
|
|
}
|
|
{%- endmacro %}
|
|
|
|
{% macro snmpsection(device, snmp) %}
|
|
snmp {
|
|
{% if device.rack and device.rack.site %}
|
|
location "{{ device.rack.site.name }} Rack {{ device.rack.name }}";
|
|
{% elif device.rack and device.site %}
|
|
location "{{ device.site.name }} Rack {{ device.rack.name }}";
|
|
{% elif device.site %}
|
|
location "{{ device.site.name }}"
|
|
{% elif device.rack %}
|
|
location "{{ device.rack.name }}"
|
|
{% endif %}
|
|
contact "{{ snmp['contact'] }}";
|
|
community {{ snmp['community'] }} {
|
|
authorization read-only;
|
|
{% for client in snmp['clients'] %}
|
|
{% if loop.first %}
|
|
clients {
|
|
{% endif %}
|
|
{{ client }};
|
|
{% if loop.last %}
|
|
}
|
|
{% endif %}
|
|
{% endfor %}
|
|
}
|
|
}
|
|
{%- endmacro %}
|
|
|
|
{% macro forwardingoptionssection(device) %}
|
|
forwarding-options {
|
|
hash-key {
|
|
family inet {
|
|
layer-4;
|
|
}
|
|
family mpls {
|
|
label-1;
|
|
label-2;
|
|
payload {
|
|
ip {
|
|
port-data;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
family inet {
|
|
filter {
|
|
input protect_RE;
|
|
}
|
|
}
|
|
}
|
|
{%- endmacro %}
|
|
|
|
{% macro routingoptionssection(device, overlay_as = None, gateway = None, routes = None) %}
|
|
routing-options {
|
|
{% if device.primary_ip4 %}
|
|
router-id {{ device.primary_ip4.address.ip }};
|
|
{% endif %}
|
|
{% if overlay_as %}
|
|
autonomous-system {{ overlay_as }};
|
|
{% endif %}
|
|
{% if gateway or routes %}
|
|
static {
|
|
{% if gateway %}
|
|
route 0.0.0.0/0 next-hop {{ gateway }};
|
|
{% endif %}
|
|
}
|
|
{% endif %}
|
|
forwarding-table {
|
|
export PFE-ECMP;
|
|
chained-composite-next-hop {
|
|
ingress {
|
|
evpn;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
{%- endmacro %}
|
|
|
|
|
|
{% macro bgprrmeshgroup(device,spines) %}
|
|
group OVERLAY_RR_MESH {
|
|
type internal;
|
|
family evpn {
|
|
signaling;
|
|
}
|
|
bfd-liveness-detection {
|
|
minimum-interval 350;
|
|
multiplier 3;
|
|
session-mode automatic;
|
|
}
|
|
{% for dst_switch in spines if dst_switch.primary_ip4.address != device.primary_ip4.address %}
|
|
neighbor {{ dst_switch.primary_ip4.address.ip }};
|
|
{% endfor %}
|
|
}
|
|
{%- endmacro %}
|
|
|
|
{% macro bgpoverlaygroup(device) %}
|
|
group OVERLAY {
|
|
type internal;
|
|
local-address {{ device.primary_ip4.address.ip }};
|
|
family evpn {
|
|
signaling;
|
|
}
|
|
{% if device.role.name == 'Spine' %}
|
|
cluster {{ device.primary_ip4.address.ip }};
|
|
multipath;
|
|
{% endif %}
|
|
bfd-liveness-detection {
|
|
minimum-interval 350;
|
|
multiplier 3;
|
|
session-mode automatic;
|
|
}
|
|
{% for interface in device.interfaces.filter(cable__isnull=False) %}
|
|
neighbor {{ interface.connected_endpoints[0].device.primary_ip4.address.ip }};
|
|
{% endfor %}
|
|
}
|
|
{%- endmacro %}
|
|
|
|
|
|
|
|
{% macro bgpunderlaygroup(device) %}
|
|
group UNDERLAY {
|
|
type external;
|
|
hold-time 10;
|
|
family inet {
|
|
unicast;
|
|
}
|
|
export BGP_LOOPBACK0;
|
|
local-as {{ device.local_context_data['underlay_as'] }};
|
|
multipath {
|
|
multiple-as;
|
|
}
|
|
{% for interface in device.interfaces.filter(cable__isnull=False) %}
|
|
neighbor {{ interface.connected_endpoints[0].ip_addresses.first().address.ip }} {
|
|
peer-as {{ interface.connected_endpoints[0].device.local_context_data['underlay_as'] }};
|
|
}
|
|
{% endfor %}
|
|
}
|
|
{%- endmacro %}
|
|
|
|
|
|
|
|
{% macro bgpsection(device,spines) %}
|
|
{% if device.role.name in ['Spine','Lab-Spine'] %}
|
|
{% set role='Spine' %}
|
|
{% set other_role='Leaf' %}
|
|
{% else %}
|
|
{% set role='Leaf' %}
|
|
{% set other_role='Spine' %}
|
|
{% endif %}
|
|
{% set name=device.name %}
|
|
bgp {
|
|
{{ bgpoverlaygroup(device) }}
|
|
{% if role == 'Spine' %}
|
|
{{ bgprrmeshgroup(device,spines) }}
|
|
{% endif %}
|
|
{{ bgpunderlaygroup(device) }}
|
|
log-updown;
|
|
}
|
|
{%- endmacro %}
|
|
|
|
|
|
{% macro sflowsection(sflow) %}
|
|
sflow {
|
|
{% for collector in sflow['collectors'] %}
|
|
collector {{ collector }};
|
|
{% endfor %}
|
|
{% for interface in sflow['interfaces'] %}
|
|
interfaces {{ interface }}.0;
|
|
{% endfor %}
|
|
}
|
|
{%- endmacro %}
|
|
|
|
|
|
{% macro vlanssection(vlans,device) %}
|
|
vlans {
|
|
{# This next line selects all of the VLANs which are configured on this device #}
|
|
{% for vlan in vlans if (device.interfaces.all()|selectattr('untagged_vlan.vid','equalto',vlan)|list|count or interfaces|map(attribute='tagged_vlans')|sum(start=[])|selectattr('vid','equalto',vlan)|list|count) or device.interfaces.all()|selectattr('name', 'equalto', 'irb.'+vlan.vid|string)|list|count %}
|
|
vl{{ vlan.vid }} {
|
|
{% if vlan.name != '' %}
|
|
description "{{ vlan.name }}";
|
|
{% endif %}
|
|
vlan-id {{ vlan.vid }};
|
|
{% if device.interfaces.all()|selectattr('name', 'equalto', 'irb.'+vlan.vid|string)|list|count %}
|
|
l3-interface irb.{{vlan.vid}};
|
|
{% endif %}
|
|
vxlan {
|
|
vni {{ vlan.vid }};
|
|
}
|
|
}
|
|
{% endfor %}
|
|
}
|
|
{%- endmacro %}
|