Creating Device configuration snippets [CREATED] h1: initial [CREATED] h2: initial [CREATED] dut: initial,isis,bgp,sr [CREATED] pe2: initial,isis,bgp,sr [CREATED] p1: initial,isis,sr [CREATED] p2: initial,isis,sr Config Deploying device configurations [INFO] Executing initial configuration for node h1 (namespace clab- ml-17-h1) [INFO] Executing initial configuration for node h2 (namespace clab- ml-17-h2) [INFO] Executing initial configuration for node pe2 [INFO] Executing initial configuration for node p1 [INFO] Executing initial configuration for node p2 [INFO] Executing isis configuration for node p1 [INFO] Executing isis configuration for node pe2 [INFO] Executing isis configuration for node p2 [INFO] Executing bgp configuration for node pe2 [INFO] Executing sr configuration for node pe2 [INFO] Executing sr configuration for node p1 [INFO] Executing sr configuration for node p2 [INFO] Starting Ansible playbook to deploy the rest of the configurations [WARNING]: Found variable using reserved name: hosts PLAY [Deploy initial device configuration] ************************************* TASK [Set variables that cannot be set with VARS] ****************************** ok: [dut] TASK [Deploy initial configuration] ******************************************** included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-module.yml for dut TASK [Figure out whether to deploy the module initial on current device] ******* ok: [dut] TASK [Find configuration template for initial] ********************************* ok: [dut] TASK [fail] ******************************************************************** skipping: [dut] TASK [Find configuration deployment deploy_script for initial] ***************** ok: [dut] TASK [Print deployed configuration when running in verbose mode] *************** ok: [dut] => { "msg": "initial configuration for dut\n=========================================\n\nupdates:\n\n- path: /interface[name=system0]/subinterface[index=0]\n value:\n description: \"No description\"\n admin-state: enable\n ipv4:\n admin-state: enable\n address:\n - ip-prefix: \"10.0.0.3/32\"\n ipv6:\n admin-state: enable\n address:\n - ip-prefix: \"2001:db8:1::3/128\"\n type: \"global-unicast\"\n\n- path: /interface[name=ethernet-1/1]\n value:\n description: \"dut ~ h1\"\n subinterface:\n index: 0\n description: \"dut ~ h1\"\n\n- path: /interface[name=ethernet-1/1]/subinterface[index=0]\n value:\n description: \"dut ~ h1\"\n admin-state: enable\n ipv6:\n admin-state: enable\n address:\n - ip-prefix: \"2001:db8:2::3/64\"\n type: \"global-unicast\"\n neighbor-discovery:\n learn-unsolicited: link-local\n router-advertisement:\n router-role:\n admin-state: enable # no ipv6 nd suppress-ra\n min-advertisement-interval: 4 # Leaving this at platform default 200..600 takes too long at startup\n _annotate_min-advertisement-interval: \"Reduced from platform default 200s\"\n max-advertisement-interval: 5\n\n- path: /interface[name=ethernet-1/2]\n value:\n description: \"dut ~ p1\"\n subinterface:\n index: 0\n description: \"dut ~ p1\"\n\n- path: /interface[name=ethernet-1/2]/subinterface[index=0]\n value:\n description: \"dut ~ p1\"\n admin-state: enable\n ipv6:\n admin-state: enable\n neighbor-discovery:\n learn-unsolicited: link-local\n router-advertisement:\n router-role:\n admin-state: enable # no ipv6 nd suppress-ra\n min-advertisement-interval: 4 # Leaving this at platform default 200..600 takes too long at startup\n _annotate_min-advertisement-interval: \"Reduced from platform default 200s\"\n max-advertisement-interval: 5\n\n\n\n- path: /network-instance[name=default]\n value:\n type: default\n interface:\n - name: system0.0\n\n- path: /network-instance[name=default]\n value:\n type: default\n interface:\n - name: ethernet-1/1.0\n- path: /network-instance[name=default]\n value:\n type: default\n interface:\n - name: ethernet-1/2.0\n\n\n" } TASK [Deploy initial configuration] ******************************************** included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-config/srlinux.yml for dut TASK [Generate JSON-RPC YAML configuration] ************************************ ok: [dut] TASK [Update SRL initial node configuration (template=/work/netlab_cicd/node_files/dut/initial)] *** changed: [dut] TASK [debug] ******************************************************************* skipping: [dut] PLAY [Deploy module-specific configurations] *********************************** TASK [Set variables that cannot be set with VARS] ****************************** ok: [dut] TASK [Deploy individual configuration modules] ********************************* included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-module.yml for dut => (item=isis) included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-module.yml for dut => (item=bgp) included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-module.yml for dut => (item=sr) TASK [Figure out whether to deploy the module isis on current device] ********** ok: [dut] TASK [Find configuration template for isis] ************************************ ok: [dut] TASK [fail] ******************************************************************** skipping: [dut] TASK [Find configuration deployment deploy_script for isis] ******************** ok: [dut] TASK [Print deployed configuration when running in verbose mode] *************** ok: [dut] => { "msg": "isis configuration for dut\n=========================================\nupdates:\n\n- path: /network-instance[name=default]/protocols/isis\n value:\n instance:\n - name: Gandalf\n admin-state: enable\n net: [ \"49.0001.0000.0000.0003.00\" ]\n level-capability: \"L2\"\n ipv6-unicast:\n admin-state: enable\n multi-topology: True\n interface:\n - interface-name: system0.0\n passive: True\n ipv4-unicast:\n admin-state: enable\n ipv6-unicast:\n admin-state: enable\n # IS-IS not configured on external interface ethernet-1/1.0\n - interface-name: ethernet-1/2.0\n circuit-type: point-to-point\n passive: False\n ipv4-unicast:\n admin-state: disable\n enable-bfd: False\n ipv6-unicast:\n admin-state: enable\n enable-bfd: False\n\n" } TASK [Deploy isis configuration] *********************************************** included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-config/srlinux.yml for dut TASK [Generate JSON-RPC YAML configuration] ************************************ ok: [dut] TASK [Update SRL isis node configuration (template=/work/netlab_cicd/node_files/dut/isis)] *** changed: [dut] TASK [debug] ******************************************************************* skipping: [dut] TASK [Figure out whether to deploy the module bgp on current device] *********** ok: [dut] TASK [Find configuration template for bgp] ************************************* ok: [dut] TASK [fail] ******************************************************************** skipping: [dut] TASK [Find configuration deployment deploy_script for bgp] ********************* ok: [dut] TASK [Print deployed configuration when running in verbose mode] *************** ok: [dut] => { "msg": "bgp configuration for dut\n=========================================\nupdates:\n\n- path: /routing-policy/policy[name=accept_all]\n value:\n default-action:\n policy-result: accept\n\n- path: /routing-policy/community-set[name=ibgp-mark]\n value:\n member: [ \"65536:0:65536\" ]\n\n- path: /routing-policy/policy[name=ibgp-mark]\n value:\n default-action:\n policy-result: reject\n statement:\n - name: mark-ibgp-routes\n action:\n bgp:\n communities:\n add: ibgp-mark\n policy-result: accept\n\n- path: /routing-policy/prefix-set[name=default_bgp_advertise]\n value:\n prefix: [] # Make sure it exists\n\n- path: /routing-policy/policy[name=default_bgp_export]\n value:\n default-action:\n policy-result: reject\n statement:\n - name: prefixes\n match:\n prefix:\n prefix-set: default_bgp_advertise\n action:\n policy-result: next-policy\n - name: bgp\n match:\n protocol: bgp\n action:\n policy-result: next-policy\n bgp:\n communities:\n remove:\n ibgp-mark\n\n\n- path: /network-instance[name=default]/protocols/bgp\n value:\n admin-state: enable\n autonomous-system: 65001\n router-id: 10.0.0.3\n ebgp-default-policy:\n export-reject-all: False\n import-reject-all: False\n\n afi-safi:\n - afi-safi-name: ipv4-unicast\n admin-state: enable\n afi-safi:\n - afi-safi-name: ipv6-unicast\n admin-state: enable\n\n- path: /routing-policy/prefix-set[name=default_bgp_advertise]\n value:\n prefix:\n - ip-prefix: 2001:db8:2::/64\n mask-length-range: exact\n\n\n\n- path: /network-instance[name=default]/protocols/bgp/group[group-name=ibgp-ipv4]\n value:\n admin-state: enable\n# neighbor: {'name': 'pe2', 'as': 65001, 'type': 'ibgp', 'ipv4': '10.0.0.4', 'ipv6': '2001:db8:1::4', '_source_intf': {'type': 'loopback', 'neighbors': [], 'virtual_interface': True, 'ifindex': 0, 'ifname': 'lo0.0', 'ipv4': '10.0.0.3/32', 'ipv6': '2001:db8:1::3/128', 'isis': {'passive': False}}, 'next_hop_self': 'ebgp', 'activate': {'ipv4': True, 'ipv6': True}}\n# ipv4: True\n# ipv6: True\n afi-safi:\n - afi-safi-name: ipv4-unicast\n admin-state: enable\n send-community-type: ['standard', 'large', 'extended']\n\n import-policy: ['accept_all']\n export-policy: ['default_bgp_export', 'accept_all']\n - afi-safi-name: ipv6-unicast\n admin-state: enable\n send-community-type: ['standard', 'large', 'extended']\n\n import-policy: ['accept_all']\n export-policy: ['default_bgp_export', 'accept_all']\n\n timers:\n connect-retry: 10\n _annotate_connect-retry: \"Reduce default 120s to 10s\"\n minimum-advertisement-interval: 1\n peer-as: 65001\n transport:\n local-address: 10.0.0.3\n next-hop-self: True\n\n\n- path: /network-instance[name=default]/protocols/bgp\n value:\n neighbor:\n - peer-address: \"10.0.0.4\"\n description: pe2\n peer-group: ibgp-ipv4\n # neighbor: {'name': 'pe2', 'as': 65001, 'type': 'ibgp', 'ipv4': '10.0.0.4', 'ipv6': '2001:db8:1::4', '_source_intf': {'type': 'loopback', 'neighbors': [], 'virtual_interface': True, 'ifindex': 0, 'ifname': 'lo0.0', 'ipv4': '10.0.0.3/32', 'ipv6': '2001:db8:1::3/128', 'isis': {'passive': False}}, 'next_hop_self': 'ebgp', 'activate': {'ipv4': True, 'ipv6': True}}\n # ipv4: True\n # ipv6: False\n afi-safi:\n - afi-safi-name: ipv4-unicast\n admin-state: enable\n send-community-type: ['standard', 'large', 'extended']\n\n - afi-safi-name: ipv6-unicast\n admin-state: disable\n\n\n- path: /network-instance[name=default]/protocols/bgp/group[group-name=ibgp-ipv6]\n value:\n admin-state: enable\n# neighbor: {'name': 'pe2', 'as': 65001, 'type': 'ibgp', 'ipv4': '10.0.0.4', 'ipv6': '2001:db8:1::4', '_source_intf': {'type': 'loopback', 'neighbors': [], 'virtual_interface': True, 'ifindex': 0, 'ifname': 'lo0.0', 'ipv4': '10.0.0.3/32', 'ipv6': '2001:db8:1::3/128', 'isis': {'passive': False}}, 'next_hop_self': 'ebgp', 'activate': {'ipv4': True, 'ipv6': True}}\n# ipv4: True\n# ipv6: True\n afi-safi:\n - afi-safi-name: ipv4-unicast\n admin-state: enable\n send-community-type: ['standard', 'large', 'extended']\n\n import-policy: ['accept_all']\n export-policy: ['default_bgp_export', 'accept_all']\n - afi-safi-name: ipv6-unicast\n admin-state: enable\n send-community-type: ['standard', 'large', 'extended']\n\n import-policy: ['accept_all']\n export-policy: ['default_bgp_export', 'accept_all']\n\n timers:\n connect-retry: 10\n _annotate_connect-retry: \"Reduce default 120s to 10s\"\n minimum-advertisement-interval: 1\n peer-as: 65001\n transport:\n local-address: 2001:db8:1::3\n next-hop-self: True\n\n\n- path: /network-instance[name=default]/protocols/bgp\n value:\n neighbor:\n - peer-address: \"2001:db8:1::4\"\n description: pe2\n peer-group: ibgp-ipv6\n # neighbor: {'name': 'pe2', 'as': 65001, 'type': 'ibgp', 'ipv4': '10.0.0.4', 'ipv6': '2001:db8:1::4', '_source_intf': {'type': 'loopback', 'neighbors': [], 'virtual_interface': True, 'ifindex': 0, 'ifname': 'lo0.0', 'ipv4': '10.0.0.3/32', 'ipv6': '2001:db8:1::3/128', 'isis': {'passive': False}}, 'next_hop_self': 'ebgp', 'activate': {'ipv4': True, 'ipv6': True}}\n # ipv4: False\n # ipv6: True\n afi-safi:\n - afi-safi-name: ipv4-unicast\n admin-state: disable\n - afi-safi-name: ipv6-unicast\n admin-state: enable\n send-community-type: ['standard', 'large', 'extended']\n\n\n\n- path: /network-instance[name=default]/protocols/bgp/afi-safi[afi-safi-name=ipv4-unicast]/ipv4-unicast/next-hop-resolution\n value:\n ipv4-next-hops:\n tunnel-resolution:\n mode: prefer\n _annotate_mode: \"tunnel-table lookup over FIB\"\n allowed-tunnel-types: [ sr-isis ]\n- path: /network-instance[name=default]/protocols/bgp/afi-safi[afi-safi-name=ipv6-unicast]/ipv6-unicast/next-hop-resolution\n value:\n ipv6-next-hops:\n tunnel-resolution:\n mode: prefer\n _annotate_mode: \"tunnel-table lookup over FIB\"\n allowed-tunnel-types: [ sr-isis ]\n \n" } TASK [Deploy bgp configuration] ************************************************ included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-config/srlinux.yml for dut TASK [Generate JSON-RPC YAML configuration] ************************************ ok: [dut] TASK [Update SRL bgp node configuration (template=/work/netlab_cicd/node_files/dut/bgp)] *** changed: [dut] TASK [debug] ******************************************************************* skipping: [dut] TASK [Figure out whether to deploy the module sr on current device] ************ ok: [dut] TASK [Find configuration template for sr] ************************************** ok: [dut] TASK [fail] ******************************************************************** skipping: [dut] TASK [Find configuration deployment deploy_script for sr] ********************** ok: [dut] TASK [Print deployed configuration when running in verbose mode] *************** ok: [dut] => { "msg": "sr configuration for dut\n=========================================\ndelete:\n- path: /network-instance[name=default]/interface[name=lo0.0]\n\nupdates:\n- path: /system/mpls/label-ranges\n value:\n #\n # EOS default ranges: https://www.arista.com/en/um-eos/eos-is-is\n # Dynamic Global Range--(100000) (262144)\n # IS-IS SR Global Range -- (900000) (65536)\n # Static Global Range -- (16) (99984)\n #\n # IOS-XR: https://packetpushers.net/yet-another-blog-about-segment-routing-part-1/\n # default SRGB range is from 16000-23999 and Dynamic label range is 24000-1048575\n #\n static:\n - name: static-srgb\n start-label: 16000\n end-label: 21000\n\n dynamic:\n - name: dynamic-srgb\n start-label: 21001\n end-label: 26000\n\n- path: /network-instance[name=default]\n value:\n interface:\n - name: system0.0\n segment-routing:\n mpls:\n global-block:\n label-range: static-srgb\n _annotate_label-range: \"static SRGB, required\"\n protocols:\n isis:\n dynamic-label-block: dynamic-srgb\n instance:\n - name: Gandalf\n max-ecmp-paths: 64 # Since release 23.7.1\n segment-routing:\n mpls:\n adjacency-sid-hold-time: 20\n dynamic-adjacency-sids:\n all-interfaces: true\n interface:\n - interface-name: system0.0\n passive: True\n segment-routing:\n mpls:\n ipv4-node-sid:\n index: \"3\"\n _annotate_index: \"References a label from the global static range\"\n ipv6-node-sid:\n index: \"103\"\n _annotate_index: \"References a label from the global static range\"\n" } TASK [Deploy sr configuration] ************************************************* included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-config/srlinux.yml for dut TASK [Generate JSON-RPC YAML configuration] ************************************ ok: [dut] TASK [Update SRL sr node configuration (template=/work/netlab_cicd/node_files/dut/sr)] *** changed: [dut] TASK [debug] ******************************************************************* skipping: [dut] PLAY [Deploy custom deployment templates] ************************************** skipping: no hosts matched PLAY RECAP ********************************************************************* dut : ok=34 changed=4 unreachable=0 failed=0 skipped=8 rescued=0 ignored=0 Results of configuration script deployments ================================================================================ h1 Script: initial h2 Script: initial pe2 Script: initial,isis,bgp,sr p1 Script: initial,isis,sr p2 Script: initial,isis,sr The tested device (DUT) is a PE-router. It runs IS-IS and SR-MPLS in an IPv6-only network and has an IBGP session with another PE-router. It has to perform IP-to-MPLS encapsulation to get the traffic across the BGP-free MPLS core. The validation test checks end-to-end connectivity across a BGP-free MPLS core between a set of linux hosts attached to the PE-routers.