/home/pipi/.local/lib/python3.10/site-packages/paramiko/pkey.py:100: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.
  "cipher": algorithms.TripleDES,
/home/pipi/.local/lib/python3.10/site-packages/paramiko/transport.py:259: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.
  "class": algorithms.TripleDES,
[WARNING]: Could not match supplied host pattern, ignoring: unprovisioned
[WARNING]: Found variable using reserved name: hosts

PLAY [Deploy initial device configuration] *************************************

TASK [Set variables that cannot be set with VARS] ******************************
ok: [h1]
ok: [s2]
ok: [rr]
ok: [h2]
ok: [s1]

TASK [Generic readiness tests] *************************************************
skipping: [rr]
skipping: [s2]
skipping: [h1]
skipping: [h2]
included: /home/pipi/net101/tools/netsim/ansible/tasks/readiness-check/ssh.yml for s1 => (item=ssh)

TASK [Check if 'sshpass' is installed] *****************************************
ok: [s1 -> localhost]

TASK [Check for 'timeout' command] *********************************************
ok: [s1 -> localhost]

TASK [Execute local ssh command to check ssh readiness] ************************
FAILED - RETRYING: [s1 -> localhost]: Execute local ssh command to check ssh readiness (20 retries left).
FAILED - RETRYING: [s1 -> localhost]: Execute local ssh command to check ssh readiness (19 retries left).
ok: [s1 -> localhost]

TASK [Confirm s1 SSH server works] *********************************************
ok: [s1] => 
  msg: Node s1 is ready.

TASK [Find device readiness script] ********************************************
ok: [s2]
ok: [h2]
ok: [h1]
ok: [rr]
ok: [s1]

TASK [Wait for device to become ready] *****************************************
skipping: [s1]
skipping: [s2]
skipping: [h1]
skipping: [h2]
included: /home/pipi/net101/tools/netsim/ansible/tasks/readiness-check/nxos.yml for rr

TASK [Wait for Eth1/1 to appear] ***********************************************
ok: [rr]

TASK [Normalize config on bridge-like devices] *********************************
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for rr, s1, s2, h1, h2

TASK [Figure out whether to deploy the module normalize on current device] *****
ok: [s2]
ok: [h2]
ok: [h1]
ok: [rr]
ok: [s1]

TASK [Find configuration template for normalize] *******************************
ok: [s2]
ok: [h2]
ok: [h1]
ok: [rr]
ok: [s1]

TASK [fail] ********************************************************************
skipping: [rr]
skipping: [s1]
skipping: [s2]
skipping: [h1]
skipping: [h2]

TASK [Find configuration deployment deploy_script for normalize] ***************
ok: [h2]
ok: [s2]
ok: [h1]
ok: [s1]
ok: [rr]

TASK [Print deployed configuration when running in verbose mode] ***************
skipping: [rr]
skipping: [s2]
skipping: [h1]
skipping: [h2]
ok: [s1] => 
  msg: |-
    normalize configuration for s1
    =========================================
    !
    interface Ethernet1
     shutdown
    !
    interface Ethernet2
     shutdown

TASK [Deploy normalize configuration] ******************************************
skipping: [rr]
skipping: [s2]
skipping: [h1]
skipping: [h2]
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/eos.yml for s1

TASK [eos_config: deploying normalize from /home/pipi/net101/tools/netsim/ansible/templates/normalize/eos.j2] ***
[WARNING]: To ensure idempotency and correct diff the input configuration lines
should be similar to how they appear if present in the running configuration on
device including the indentation
changed: [s1]

TASK [Deploy initial configuration] ********************************************
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for rr, s1, s2, h1, h2

TASK [Figure out whether to deploy the module initial on current device] *******
ok: [s2]
ok: [h2]
ok: [h1]
ok: [rr]
ok: [s1]

TASK [Find configuration template for initial] *********************************
ok: [s2]
ok: [h1]
ok: [rr]
ok: [h2]
ok: [s1]

TASK [fail] ********************************************************************
skipping: [rr]
skipping: [s1]
skipping: [s2]
skipping: [h1]
skipping: [h2]

TASK [Find configuration deployment deploy_script for initial] *****************
ok: [h2]
ok: [s2]
ok: [h1]
ok: [rr]
ok: [s1]

TASK [Print deployed configuration when running in verbose mode] ***************
ok: [h1] => 
  msg: |-
    initial configuration for h1
    =========================================
    #!/bin/bash
    #
    # This script contains the 'ip' commands needed to set up container
    # interfaces and route table. It's executed within the container
    # network namespace on the container host.
    #
    #  /etc/hosts file is generated as a clab bind.
    #
    set -e
  
    ### One-Shot configuration (non-Ubuntu VM or container)
    #
    # Send ARP requests from a sane source IP address
    sysctl -w net.ipv4.conf.all.arp_announce=2
  
    #
    # Disable IPv4 and IPv6 forwarding
    #
    sysctl -w net.ipv4.ip_forward=0
    sysctl -w net.ipv6.conf.all.forwarding=0
  
    #
    # Interface addressing, create any bond devices
    #
    ip link set dev eth1 up
    set +e
    ip addr del 172.31.1.4/24 dev eth1 2>/dev/null
    set -e
    ip addr add 172.31.1.4/24 dev eth1
    sysctl -w net.ipv6.conf.eth1.disable_ipv6=1
    ip link set dev eth1 mtu 1500
ok: [h2] => 
  msg: |-
    initial configuration for h2
    =========================================
    #!/bin/bash
    #
    # This script contains the 'ip' commands needed to set up container
    # interfaces and route table. It's executed within the container
    # network namespace on the container host.
    #
    #  /etc/hosts file is generated as a clab bind.
    #
    set -e
  
    ### One-Shot configuration (non-Ubuntu VM or container)
    #
    # Send ARP requests from a sane source IP address
    sysctl -w net.ipv4.conf.all.arp_announce=2
  
    #
    # Disable IPv4 and IPv6 forwarding
    #
    sysctl -w net.ipv4.ip_forward=0
    sysctl -w net.ipv6.conf.all.forwarding=0
  
    #
    # Interface addressing, create any bond devices
    #
    ip link set dev eth1 up
    set +e
    ip addr del 172.31.1.5/24 dev eth1 2>/dev/null
    set -e
    ip addr add 172.31.1.5/24 dev eth1
    sysctl -w net.ipv6.conf.eth1.disable_ipv6=1
    ip link set dev eth1 mtu 1500
ok: [rr] => 
  msg: |-
    initial configuration for rr
    =========================================
    hostname rr
    !
    no ip domain-lookup
    !
    feature lldp
    !
    username vagrant password vagrant
    !
    ip host s1 10.0.0.2
    ip host s2 10.0.0.3
    ip host h1 172.31.1.4
    ip host h2 172.31.1.5
    !
    !
    interface mgmt0
     no lldp transmit
     no lldp receive
    !
    interface loopback0
     no shutdown
     ip address 10.0.0.1/32
     ipv6 address 2001:db8:cafe:1::1/64
     ipv6 nd ra-interval 5 min 3
    !
    interface Ethernet1/1
     no shutdown
     no switchport
     mac-address caf0.0001.0001
     description rr -> s1
     mtu 1600
     ip address 10.1.0.1/30
     ipv6 address 2001:db8:1::1/64
     ipv6 nd ra-interval 5 min 3
    !
    interface Ethernet1/2
     no shutdown
     no switchport
     mac-address caf0.0001.0002
     description rr -> s2
     mtu 1600
     ip address 10.1.0.5/30
     ipv6 address 2001:db8:1:1::1/64
     ipv6 nd ra-interval 5 min 3
    !
ok: [s2] => 
  msg: |-
    initial configuration for s2
    =========================================
    #!/bin/bash
    #
    set -e
    set -x
    #
    # Create bash profile script
    #
    cat <<SCRIPT >/root/.bash_profile
    #!/bin/bash
    #
    export PS1="\h(bash)# "
    echo
    echo "Use vtysh to connect to FRR daemon"
    echo
    SCRIPT
    #
    # This is an artifact of unknown provenance that should be removed in a year or two (= 2026/2027)
    #
    # FRR controls these parameters with 'ip forwarding' and 'ipv6 forwarding' commands
    #
    sysctl -w net.ipv4.ip_forward=1
    sysctl -w net.ipv6.conf.all.forwarding=1
    #
    #
    # Get the current next hop for the default route
    #
    def_nh=$(ip route list default|awk '{ print $3 }')
    #
    # Create the management VRF and add eth0 to it
    #
    if [ ! -e /sys/devices/virtual/net/mgmt ]; then
      ip link add mgmt type vrf table 42
    fi
    ip link set mgmt up
    sysctl -qw net.ipv6.conf.eth0.keep_addr_on_down=1
    ip link set eth0 master mgmt
    #
    # Reinstall the default route if we had it before
    #
    if [[ -n "$def_nh" ]]; then
      ip route add 0.0.0.0/0 vrf mgmt via $def_nh
    fi
    #
    # Enable FRR modules (if not using containerlab bind-mounted /etc/frr/daemons)
    #
  
    # Set system defaults
    #
    # Send ARP requests from a sane source IP address
    #
    sysctl -w net.ipv4.conf.all.arp_announce=2
  
    #
    # Create loopbacks, stub and lag/bond devices
    #
    if [ ! -e /sys/class/net/lo ]; then
      if [ ! -e /sys/devices/virtual/net/lo ]; then
        ip link add lo type dummy
        ip link set dev lo up
      fi
    fi
  
    # Disable IPv6 (for IPv4-only interfaces) or SLAAC (if the device is a router)
    #
    ip link set eth1 down
    sysctl -qw net.ipv6.conf.eth1.autoconf=0
    sysctl -qw net.ipv6.conf.eth1.accept_ra=0
    ip link set dev eth1 mtu 1600
    ip link set eth1 up
    ip link set eth2 down
    sysctl -qw net.ipv6.conf.eth2.disable_ipv6=1
    ip link set dev eth2 mtu 1500
    ip link set eth2 up
  
    #
    # Add vtysh.conf file
    echo "service integrated-vtysh-config" >/etc/frr/vtysh.conf
  
    #
    # Rest of initial configuration done through VTYSH
    #
    cat >/tmp/config <<CONFIG
    hostname s2
    !
    log file /tmp/logging
  
    !
    ip forwarding
    ipv6 forwarding
    vrf mgmt
     exit-vrf
    !
    frr defaults datacenter
    !
    interface lo
     no shutdown
     ip address 10.0.0.3/32
     ipv6 address 2001:db8:cafe:3::1/64
    !
    interface eth1
     no shutdown
     description s2 -> rr
     ip address 10.1.0.6/30
     ipv6 address 2001:db8:1:1::3/64
     ipv6 nd ra-interval 5
     no ipv6 nd suppress-ra
    !
    interface eth2
     no shutdown
     description [Access VLAN red] s2 -> h2
     ! no ip address
    !
    interface vlan1000
     no shutdown
     description VLAN red (1000) -> [h1,s1,h2]
     ! no ip address
    !
    do write
    CONFIG
    vtysh -f /tmp/config
    !
    exit 0
ok: [s1] => 
  msg: |-
    initial configuration for s1
    =========================================
    hostname s1
    !
    logging monitor debugging
    aaa authorization exec default local
    !
    lldp run
    ip routing
    ipv6 unicast-routing
    !
    !
    ip host rr 10.0.0.1 10.1.0.1 10.1.0.5
    ip host s2 10.0.0.3 10.1.0.6
    ip host h1 172.31.1.4
    ip host h2 172.31.1.5
    ipv6 host rr 2001:db8:cafe:1::1
    ipv6 host s2 2001:db8:cafe:3::1
    !
    interface Management0
     no lldp transmit
     no lldp receive
    !
    interface Loopback0
     ip address 10.0.0.2/32
     ipv6 nd ra interval 5
     ipv6 address 2001:db8:cafe:2::1/64
    !
    interface Ethernet1
     no switchport
     mtu 1600
     description s1 -> rr
     ip address 10.1.0.2/30
     ipv6 nd ra interval 5
     ipv6 address 2001:db8:1::2/64
     mac-address caf0.0002.0001
    !
     no shutdown
    !
    interface Ethernet2
     no switchport
     description [Access VLAN red] s1 -> h1
    !
     no shutdown
    !
    interface Vlan1000
     description VLAN red (1000) -> [h1,h2,s2]
    !

TASK [Deploy initial configuration] ********************************************
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/nxos.yml for rr
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/eos.yml for s1
included: /home/pipi/net101/tools/netsim/ansible/tasks/frr/initial-clab.yml for s2
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/linux-clab.yml for h1, h2

TASK [nxos_config: deploying initial from /home/pipi/net101/tools/netsim/ansible/templates/initial/nxos.j2] ***
changed: [rr]

TASK [eos_config: deploying initial from /home/pipi/net101/tools/netsim/ansible/templates/initial/eos.j2] ***
changed: [s1]

TASK [Attempt to load VRF kernel module] ***************************************
changed: [s2 -> localhost]

TASK [Disable FRR management VRF when modprobe fails] **************************
skipping: [s2]

TASK [include_tasks] ***********************************************************
included: /home/pipi/net101/tools/netsim/ansible/tasks/frr/deploy-config.yml for s2

TASK [template] ****************************************************************
changed: [s2]

TASK [set_fact] ****************************************************************
ok: [s2]

TASK [run /tmp/config.sh to deploy initial config from /home/pipi/net101/tools/netsim/ansible/templates/initial/frr.j2] ***
changed: [s2]

TASK [run vtysh to import initial config from /home/pipi/net101/tools/netsim/ansible/templates/initial/frr.j2] ***
skipping: [s2]

TASK [Define script filename and determine whether to execute in netns] ********
ok: [h1]
ok: [h2]

TASK [Create a temporary file for the rendered script] *************************
changed: [h1 -> localhost]
changed: [h2 -> localhost]

TASK [Create container setup script from /home/pipi/net101/tools/netsim/ansible/templates/initial/linux-clab.j2] ***
changed: [h2 -> localhost]
changed: [h1 -> localhost]

TASK [Copy script into running container at /tmp/config-h1_initial.sh] *********
skipping: [h1]
skipping: [h2]

TASK [Execute /tmp/config-h1_initial.sh to deploy initial config based on /home/pipi/net101/tools/netsim/ansible/templates/initial/linux-clab.j2] ***
skipping: [h1]
skipping: [h2]

TASK [Container configuration for initial based on /home/pipi/net101/tools/netsim/ansible/templates/initial/linux-clab.j2 executed in netns] ***
changed: [h2 -> localhost]
changed: [h1 -> localhost]

TASK [Remove temporary file /tmp/h1_initial-r0cwab1a.sh] ***********************
changed: [h2 -> localhost]
changed: [h1 -> localhost]

PLAY [Deploy module-specific configurations] ***********************************

TASK [Set variables that cannot be set with VARS] ******************************
ok: [s2]
ok: [h1]
ok: [h2]
ok: [rr]
ok: [s1]

TASK [Deploy individual configuration modules] *********************************
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for rr, s1, s2, h1, h2 => (item=vlan)
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for rr, s1, s2, h1, h2 => (item=routing)
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for rr, s1, s2, h1, h2 => (item=ospf)
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for rr, s1, s2, h1, h2 => (item=bgp)
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for rr, s1, s2, h1, h2 => (item=vxlan)
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for rr, s1, s2, h1, h2 => (item=evpn)

TASK [Figure out whether to deploy the module vlan on current device] **********
ok: [s2]
ok: [h1]
ok: [h2]
ok: [rr]
ok: [s1]

TASK [Find configuration template for vlan] ************************************
skipping: [rr]
skipping: [h1]
skipping: [h2]
ok: [s2]
ok: [s1]

TASK [fail] ********************************************************************
skipping: [rr]
skipping: [s1]
skipping: [s2]
skipping: [h1]
skipping: [h2]

TASK [Find configuration deployment deploy_script for vlan] ********************
skipping: [rr]
skipping: [h1]
skipping: [h2]
ok: [s2]
ok: [s1]

TASK [Print deployed configuration when running in verbose mode] ***************
skipping: [rr]
skipping: [h1]
skipping: [h2]
ok: [s1] => 
  msg: |-
    vlan configuration for s1
    =========================================
    vlan 1000
     name red
    !
  
    !
    interface Ethernet2
     switchport
     switchport access vlan 1000
    !
    interface Vlan1000
ok: [s2] => 
  msg: |-
    vlan configuration for s2
    =========================================
    #!/bin/bash
    #
    set -e # Exit immediately when any command fails
    #
    if [ ! -e /sys/devices/virtual/net/vlan1000 ]; then
      ip link add vlan1000 type bridge
      ip link set dev vlan1000 address ca:f4:00:03:00:00
  
      ip addr flush dev vlan1000
    fi
  
    ip link set dev eth2 master vlan1000
  
    ip link set dev vlan1000 up

TASK [Deploy vlan configuration] ***********************************************
skipping: [rr]
skipping: [h1]
skipping: [h2]
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/eos.yml for s1
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/frr.yml for s2

TASK [eos_config: deploying vlan from /home/pipi/net101/tools/netsim/ansible/templates/vlan/eos.j2] ***
changed: [s1]

TASK [template] ****************************************************************
changed: [s2]

TASK [set_fact] ****************************************************************
ok: [s2]

TASK [run /tmp/config.sh to deploy vlan config from /home/pipi/net101/tools/netsim/ansible/templates/vlan/frr.j2] ***
changed: [s2]

TASK [run vtysh to import vlan config from /home/pipi/net101/tools/netsim/ansible/templates/vlan/frr.j2] ***
skipping: [s2]

TASK [Figure out whether to deploy the module routing on current device] *******
ok: [s2]
ok: [h1]
ok: [h2]
ok: [rr]
ok: [s1]

TASK [Find configuration template for routing] *********************************
skipping: [rr]
skipping: [s1]
skipping: [s2]
ok: [h1]
ok: [h2]

TASK [fail] ********************************************************************
skipping: [rr]
skipping: [s1]
skipping: [s2]
skipping: [h1]
skipping: [h2]

TASK [Find configuration deployment deploy_script for routing] *****************
skipping: [rr]
skipping: [s1]
skipping: [s2]
ok: [h1]
ok: [h2]

TASK [Print deployed configuration when running in verbose mode] ***************
skipping: [rr]
skipping: [s1]
skipping: [s2]
ok: [h1] => 
  msg: |-
    routing configuration for h1
    =========================================
    #!/bin/bash
    #
    # Add static routes (usually IPv4 routes pointing to the first usable gateway)
    #
    #
    #
    #
    #
    #
    # Print the final routing table
    ip route
ok: [h2] => 
  msg: |-
    routing configuration for h2
    =========================================
    #!/bin/bash
    #
    # Add static routes (usually IPv4 routes pointing to the first usable gateway)
    #
    #
    #
    #
    #
    #
    # Print the final routing table
    ip route

TASK [Deploy routing configuration] ********************************************
skipping: [rr]
skipping: [s1]
skipping: [s2]
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/linux-clab.yml for h1, h2

TASK [Define script filename and determine whether to execute in netns] ********
ok: [h1]
ok: [h2]

TASK [Create a temporary file for the rendered script] *************************
changed: [h1 -> localhost]
changed: [h2 -> localhost]

TASK [Create container setup script from /home/pipi/net101/tools/netsim/ansible/templates/routing/linux-clab.j2] ***
changed: [h1 -> localhost]
changed: [h2 -> localhost]

TASK [Copy script into running container at /tmp/config-h1_routing.sh] *********
skipping: [h1]
skipping: [h2]

TASK [Execute /tmp/config-h1_routing.sh to deploy routing config based on /home/pipi/net101/tools/netsim/ansible/templates/routing/linux-clab.j2] ***
skipping: [h1]
skipping: [h2]

TASK [Container configuration for routing based on /home/pipi/net101/tools/netsim/ansible/templates/routing/linux-clab.j2 executed in netns] ***
changed: [h1 -> localhost]
changed: [h2 -> localhost]

TASK [Remove temporary file /tmp/h1_routing-m7xowr_k.sh] ***********************
changed: [h1 -> localhost]
changed: [h2 -> localhost]

TASK [Figure out whether to deploy the module ospf on current device] **********
ok: [s2]
ok: [h1]
ok: [h2]
ok: [rr]
ok: [s1]

TASK [Find configuration template for ospf] ************************************
skipping: [h1]
skipping: [h2]
ok: [s2]
ok: [rr]
ok: [s1]

TASK [fail] ********************************************************************
skipping: [rr]
skipping: [s1]
skipping: [s2]
skipping: [h1]
skipping: [h2]

TASK [Find configuration deployment deploy_script for ospf] ********************
skipping: [h1]
skipping: [h2]
ok: [s2]
ok: [rr]
ok: [s1]

TASK [Print deployed configuration when running in verbose mode] ***************
skipping: [h1]
skipping: [h2]
ok: [s2] => 
  msg: |-
    ospf configuration for s2
    =========================================
    !
    ! OSPFv2 FRR configuration
    !
    router ospf
     ospf router-id 10.0.0.3
     timers throttle spf 10 50 500
     timers throttle lsa all 100
     timers lsa min-arrival 100
  
  
    exit
    !
    interface lo
    !
     ip ospf area 0.0.0.0
    !
    interface eth1
    ! s2 -> rr
     ip ospf area 0.0.0.0
     ip ospf network point-to-point
    !
  
    !
    ! OSPFv3 FRR configuration
    !
    interface lo
    !
     ipv6 ospf6 area 0.0.0.0
    !
    interface eth1
    ! s2 -> rr
     ipv6 ospf6 area 0.0.0.0
     ipv6 ospf6 network point-to-point
    !
    !
    router ospf6
     ospf6 router-id 10.0.0.3
     timers lsa min-arrival 100
     timers throttle spf 10 50 500
  
  
    exit
  
    !
    do write
ok: [rr] => 
  msg: |-
    ospf configuration for rr
    =========================================
    feature ospf
    !
    router ospf 1
     router-id 10.0.0.1
     timers throttle spf 100 200 500
     timers throttle lsa 0 100 500
    !
    interface loopback0
     ip router ospf 1 area 0.0.0.0
    !
    interface Ethernet1/1
    ! rr -> s1
     ip router ospf 1 area 0.0.0.0
     ip ospf network point-to-point
    !
    interface Ethernet1/2
    ! rr -> s2
     ip router ospf 1 area 0.0.0.0
     ip ospf network point-to-point
    !
    feature ospfv3
    !
    router ospfv3 1
     router-id 10.0.0.1
    !
    interface loopback0
    !
     ipv6 router ospfv3 1 area 0.0.0.0
    !
    interface Ethernet1/1
    ! rr -> s1
     ipv6 router ospfv3 1 area 0.0.0.0
     ospfv3 network point-to-point
    !
    interface Ethernet1/2
    ! rr -> s2
     ipv6 router ospfv3 1 area 0.0.0.0
     ospfv3 network point-to-point
    !
ok: [s1] => 
  msg: |-
    ospf configuration for s1
    =========================================
    !
    ! OSPFv2 configuration
    !
    router ospf 1
     router-id 10.0.0.2
     interface unnumbered hello mask tx 0.0.0.0
     timers spf delay initial 100 200 500
     timers lsa rx min interval 100
     timers lsa tx delay initial 100 200 500
  
  
    !
    interface Loopback0
    !
     ip ospf area 0.0.0.0
    !
    interface Ethernet1
    ! s1 -> rr
     ip ospf area 0.0.0.0
     ip ospf network point-to-point
    !
  
    !
    ! OSPFv3 configuration
    !
    interface Loopback0
    !
     ipv6 ospf 1 area 0.0.0.0
    !
    interface Ethernet1
    ! s1 -> rr
     ipv6 ospf 1 area 0.0.0.0
     ipv6 ospf network point-to-point
    !
    !
    ipv6 router ospf 1
     router-id 10.0.0.2
     timers spf delay initial 100 200 500
     timers lsa rx min interval 100
     timers lsa tx delay initial 100 200 500

TASK [Deploy ospf configuration] ***********************************************
skipping: [h1]
skipping: [h2]
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/nxos.yml for rr
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/eos.yml for s1
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/frr.yml for s2

TASK [nxos_config: deploying ospf from /home/pipi/net101/tools/netsim/ansible/templates/ospf/nxos.j2] ***
changed: [rr]

TASK [eos_config: deploying ospf from /home/pipi/net101/tools/netsim/ansible/templates/ospf/eos.j2] ***
changed: [s1]

TASK [template] ****************************************************************
changed: [s2]

TASK [set_fact] ****************************************************************
ok: [s2]

TASK [run /tmp/config.sh to deploy ospf config from /home/pipi/net101/tools/netsim/ansible/templates/ospf/frr.j2] ***
skipping: [s2]

TASK [run vtysh to import ospf config from /home/pipi/net101/tools/netsim/ansible/templates/ospf/frr.j2] ***
changed: [s2]

TASK [Figure out whether to deploy the module bgp on current device] ***********
ok: [s2]
ok: [h1]
ok: [h2]
ok: [rr]
ok: [s1]

TASK [Find configuration template for bgp] *************************************
skipping: [h1]
skipping: [h2]
ok: [s2]
ok: [rr]
ok: [s1]

TASK [fail] ********************************************************************
skipping: [rr]
skipping: [s1]
skipping: [s2]
skipping: [h1]
skipping: [h2]

TASK [Find configuration deployment deploy_script for bgp] *********************
skipping: [h1]
skipping: [h2]
ok: [s2]
ok: [rr]
ok: [s1]

TASK [Print deployed configuration when running in verbose mode] ***************
skipping: [h1]
skipping: [h2]
ok: [s2] => 
  msg: |-
    bgp configuration for s2
    =========================================
    !
    router bgp 65000
      no bgp ebgp-requires-policy
      no bgp default ipv4-unicast
      bgp default show-hostname
      bgp default show-nexthop-hostname
      ! Consider AS paths of same length but with different AS as ECMP candidates
      bgp bestpath as-path multipath-relax
  
      bgp router-id 10.0.0.3
    !
      neighbor 10.0.0.1 remote-as 65000
      neighbor 10.0.0.1 description rr
      neighbor 10.0.0.1 update-source lo
    !
      neighbor 2001:db8:cafe:1::1 remote-as 65000
      neighbor 2001:db8:cafe:1::1 description rr
      neighbor 2001:db8:cafe:1::1 update-source lo
    !
     address-family ipv4 unicast
    !
  
    !
    ! Originate networks from connected subnets
    !
      network 10.0.0.3/32
    !
      neighbor 10.0.0.1 activate
      neighbor 10.0.0.1 next-hop-self
      no neighbor 10.0.0.1 send-community all
      neighbor 10.0.0.1 send-community standard
      neighbor 10.0.0.1 send-community large
      neighbor 10.0.0.1 send-community extended
    !
     address-family ipv6 unicast
    !
  
    !
    ! Originate networks from connected subnets
    !
      network 2001:db8:cafe:3::/64
    !
      neighbor 2001:db8:cafe:1::1 activate
      neighbor 2001:db8:cafe:1::1 next-hop-self
      no neighbor 2001:db8:cafe:1::1 send-community all
      neighbor 2001:db8:cafe:1::1 send-community standard
      neighbor 2001:db8:cafe:1::1 send-community large
      neighbor 2001:db8:cafe:1::1 send-community extended
    !
    !
    !
    do write
ok: [rr] => 
  msg: |-
    bgp configuration for rr
    =========================================
    !
    feature bgp
    !
    router bgp 65000
      router-id 10.0.0.1
      cluster-id 10.0.0.1
    !
     address-family ipv4 unicast
    !
      network 10.0.0.1/32
    !
    !
    !
     address-family ipv6 unicast
    !
      network 2001:db8:cafe:1::/64
    !
    !
    !
     neighbor 10.0.0.2 remote-as 65000
      description s1
      update-source loopback0
      address-family ipv4 unicast
       next-hop-self
       route-reflector-client
       send-community both
    !
     neighbor 10.0.0.3 remote-as 65000
      description s2
      update-source loopback0
      address-family ipv4 unicast
       next-hop-self
       route-reflector-client
       send-community both
    !
     neighbor 2001:db8:cafe:2::1 remote-as 65000
      description s1
      update-source loopback0
      address-family ipv6 unicast
       next-hop-self
       route-reflector-client
       send-community both
    !
     neighbor 2001:db8:cafe:3::1 remote-as 65000
      description s2
      update-source loopback0
      address-family ipv6 unicast
       next-hop-self
       route-reflector-client
       send-community both
    !
    !
ok: [s1] => 
  msg: |-
    bgp configuration for s1
    =========================================
    !
    route-map next-hop-self-ipv4 permit 10
       match route-type external
       set ip next-hop peer-address
    !
    route-map next-hop-self-ipv4 permit 20
    !
    route-map next-hop-self-ipv6 permit 10
       match route-type external
       set ipv6 next-hop peer-address
    !
    route-map next-hop-self-ipv6 permit 20
    !
    !
    router bgp 65000
      bgp advertise-inactive
      bgp log-neighbor-changes
      no bgp default ipv4-unicast
      no bgp default ipv6-unicast
      router-id 10.0.0.2
    !
      neighbor 10.0.0.1 remote-as 65000
      neighbor 10.0.0.1 description rr
      neighbor 10.0.0.1 update-source Loopback0
      neighbor 10.0.0.1 send-community standard extended large
    !
      neighbor 2001:db8:cafe:1::1 remote-as 65000
      neighbor 2001:db8:cafe:1::1 description rr
      neighbor 2001:db8:cafe:1::1 update-source Loopback0
      neighbor 2001:db8:cafe:1::1 send-community standard extended large
    !
    !
     address-family ipv4
  
    !
    !
    ! Originate networks from connected subnets
    !
      network 10.0.0.2/32
    !
    !
      neighbor 10.0.0.1 activate
      neighbor 10.0.0.1 route-map next-hop-self-ipv4 out
    !
     address-family ipv6
  
    !
    !
    ! Originate networks from connected subnets
    !
      network 2001:db8:cafe:2::/64
    !
    !
      neighbor 2001:db8:cafe:1::1 activate
      neighbor 2001:db8:cafe:1::1 route-map next-hop-self-ipv6 out
    !

TASK [Deploy bgp configuration] ************************************************
skipping: [h1]
skipping: [h2]
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/nxos.yml for rr
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/eos.yml for s1
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/frr.yml for s2

TASK [nxos_config: deploying bgp from /home/pipi/net101/tools/netsim/ansible/templates/bgp/nxos.j2] ***
changed: [rr]

TASK [eos_config: deploying bgp from /home/pipi/net101/tools/netsim/ansible/templates/bgp/eos.j2] ***
changed: [s1]

TASK [template] ****************************************************************
changed: [s2]

TASK [set_fact] ****************************************************************
ok: [s2]

TASK [run /tmp/config.sh to deploy bgp config from /home/pipi/net101/tools/netsim/ansible/templates/bgp/frr.j2] ***
skipping: [s2]

TASK [run vtysh to import bgp config from /home/pipi/net101/tools/netsim/ansible/templates/bgp/frr.j2] ***
changed: [s2]

TASK [Figure out whether to deploy the module vxlan on current device] *********
ok: [s2]
ok: [h2]
ok: [h1]
ok: [rr]
ok: [s1]

TASK [Find configuration template for vxlan] ***********************************
skipping: [rr]
skipping: [h1]
skipping: [h2]
ok: [s2]
ok: [s1]

TASK [fail] ********************************************************************
skipping: [rr]
skipping: [s1]
skipping: [s2]
skipping: [h1]
skipping: [h2]

TASK [Find configuration deployment deploy_script for vxlan] *******************
skipping: [rr]
skipping: [h1]
skipping: [h2]
ok: [s2]
ok: [s1]

TASK [Print deployed configuration when running in verbose mode] ***************
skipping: [rr]
skipping: [h1]
skipping: [h2]
ok: [s2] => 
  msg: |-
    vxlan configuration for s2
    =========================================
    #!/bin/bash
    #
    set -e # Exit immediately when any command fails
    #
  
  
  
    # Create L3 VNIs with bridges and add to correct vrf table
  
    # Create VXLAN L2 interface per vni
    ip link add vxlan1000 type vxlan \
      id 1000 \
      dstport 4789 \
      local 10.0.0.3 nolearning
    #
    # Add it to the VLAN bridge (create if needed for l3 vnis); disable STP
    if [ ! -e /sys/devices/virtual/net/vlan1000 ]; then
    ip link add vlan1000 type bridge
    ip link set up dev vlan1000
    fi
    ip link set dev vxlan1000 master vlan1000
    ip link set vlan1000 type bridge stp_state 0
  
    # Do not generate ipv6 link-local address for VXLAN devices
    ip link set mtu 1500 addrgenmode none dev vxlan1000
    # Disable dynamic MAC learning for evpn, see https://docs.frrouting.org/en/latest/evpn.html
    bridge link set dev vxlan1000 learning off
    ip link set up dev vxlan1000
  
  
    exit $?
ok: [s1] => 
  msg: |-
    vxlan configuration for s1
    =========================================
    interface vxlan 1
      vxlan source-interface Loopback0
      vxlan vlan 1000 vni 1000

TASK [Deploy vxlan configuration] **********************************************
skipping: [rr]
skipping: [h1]
skipping: [h2]
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/eos.yml for s1
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/frr.yml for s2

TASK [eos_config: deploying vxlan from /home/pipi/net101/tools/netsim/ansible/templates/vxlan/eos.j2] ***
changed: [s1]

TASK [template] ****************************************************************
changed: [s2]

TASK [set_fact] ****************************************************************
ok: [s2]

TASK [run /tmp/config.sh to deploy vxlan config from /home/pipi/net101/tools/netsim/ansible/templates/vxlan/frr.j2] ***
changed: [s2]

TASK [run vtysh to import vxlan config from /home/pipi/net101/tools/netsim/ansible/templates/vxlan/frr.j2] ***
skipping: [s2]

TASK [Figure out whether to deploy the module evpn on current device] **********
ok: [s2]
ok: [h1]
ok: [h2]
ok: [rr]
ok: [s1]

TASK [Find configuration template for evpn] ************************************
skipping: [h1]
skipping: [h2]
ok: [s2]
ok: [rr]
ok: [s1]

TASK [fail] ********************************************************************
skipping: [rr]
skipping: [s1]
skipping: [s2]
skipping: [h1]
skipping: [h2]

TASK [Find configuration deployment deploy_script for evpn] ********************
skipping: [h1]
skipping: [h2]
ok: [s2]
ok: [rr]
ok: [s1]

TASK [Print deployed configuration when running in verbose mode] ***************
skipping: [h1]
skipping: [h2]
ok: [rr] => 
  msg: |-
    evpn configuration for rr
    =========================================
    nv overlay evpn
    !
    !
    !
    router bgp 65000
      neighbor 10.0.0.2
        address-family l2vpn evpn
          send-community both
          route-reflector-client
    !
      neighbor 10.0.0.3
        address-family l2vpn evpn
          send-community both
          route-reflector-client
    !
ok: [s2] => 
  msg: |-
    evpn configuration for s2
    =========================================
    #!/bin/bash
    #
    set -e
    cat >/tmp/evpn_config <<CONFIG
    router bgp 65000
     address-family l2vpn evpn
      advertise-all-vni
      advertise-svi-ip
      advertise ipv4 unicast
      advertise ipv6 unicast
  
    ! Configure explicit Route Targets and RD per L2 VNI; auto-derived differs
      vni 1000
       rd 10.0.0.3:1000
       route-target import 65000:1000
       route-target export 65000:1000
      exit-vni
  
      neighbor 10.0.0.1 activate
    #  neighbor 10.0.0.1 soft-reconfiguration inbound
      neighbor 2001:db8:cafe:1::1 activate
    #  neighbor 2001:db8:cafe:1::1 soft-reconfiguration inbound
  
     exit-address-family
    !
  
    exit
  
    ! L3 VRF EVPN handling
    !
    do write
    CONFIG
    vtysh -f /tmp/evpn_config
    vtysh -c 'clear bgp *'
ok: [s1] => 
  msg: |-
    evpn configuration for s1
    =========================================
    !
    router bgp 65000
     address-family evpn
    !
      neighbor 10.0.0.1 activate
    !
     vlan 1000
      rd 10.0.0.2:1000
      route-target import 65000:1000
      route-target export 65000:1000
      redistribute learned

TASK [Deploy evpn configuration] ***********************************************
skipping: [h1]
skipping: [h2]
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/nxos.yml for rr
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/eos.yml for s1
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/frr.yml for s2

TASK [nxos_config: deploying evpn from /home/pipi/net101/tools/netsim/ansible/templates/evpn/nxos.j2] ***
changed: [rr]

TASK [eos_config: deploying evpn from /home/pipi/net101/tools/netsim/ansible/templates/evpn/eos.j2] ***
changed: [s1]

TASK [template] ****************************************************************
changed: [s2]

TASK [set_fact] ****************************************************************
ok: [s2]

TASK [run /tmp/config.sh to deploy evpn config from /home/pipi/net101/tools/netsim/ansible/templates/evpn/frr.j2] ***
changed: [s2]

TASK [run vtysh to import evpn config from /home/pipi/net101/tools/netsim/ansible/templates/evpn/frr.j2] ***
skipping: [s2]

PLAY [Deploy custom deployment templates] **************************************

TASK [Run custom configuration deployment scripts] *****************************
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-custom-config.yml for s1 => (item=_n_s1)

TASK [Find configuration template] *********************************************
ok: [s1]

TASK [fail] ********************************************************************
skipping: [s1]

TASK [Check is the configuration template is a file] ***************************
ok: [s1 -> localhost]

TASK [fail] ********************************************************************
skipping: [s1]

TASK [Process template /work/netlab_cicd/_n_s1.j2 for s1] **********************
skipping: [s1]

TASK [Find custom configuration deployment script] *****************************
ok: [s1]

TASK [Run the configuration deployment script] *********************************
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/eos.yml for s1

TASK [eos_config: deploying _n_s1 from /work/netlab_cicd/_n_s1.j2] *************
changed: [s1]

PLAY RECAP *********************************************************************
h1                         : ok=39   changed=8    unreachable=0    failed=0    skipped=36   rescued=0    ignored=0   
h2                         : ok=39   changed=8    unreachable=0    failed=0    skipped=36   rescued=0    ignored=0   
rr                         : ok=43   changed=4    unreachable=0    failed=0    skipped=23   rescued=0    ignored=0   
s1                         : ok=65   changed=8    unreachable=0    failed=0    skipped=16   rescued=0    ignored=0   
s2                         : ok=65   changed=13   unreachable=0    failed=0    skipped=23   rescued=0    ignored=0   



The device under test is an EVPN route reflector. It should propagate
EVPN AF routes between PE-devices, resulting in VXLAN-based VLAN
extension.

* h1 and h2 should be able to ping each other

Please note it might take a while for the lab to work due to
STP learning phase