[WARNING]: Could not match supplied host pattern, ignoring: unprovisioned PLAY [Deploy initial device configuration] ************************************* TASK [Set variables that cannot be set with VARS] ****************************** ok: [h1] ok: [h2] ok: [h3] ok: [s1] ok: [h4] ok: [s2] TASK [Find device readiness script] ******************************************** ok: [h1] ok: [h2] ok: [h3] ok: [h4] ok: [s1] ok: [s2] TASK [Wait for device to become ready] ***************************************** skipping: [h1] skipping: [h2] skipping: [h3] skipping: [h4] skipping: [s1] skipping: [s2] TASK [Deploy initial configuration] ******************************************** included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for h1, h2, h3, h4, s1, s2 TASK [Figure out whether to deploy the module initial on current device] ******* ok: [h1] ok: [h2] ok: [h3] ok: [s1] ok: [h4] ok: [s2] TASK [Find configuration template for initial] ********************************* ok: [h1] ok: [h2] ok: [h3] ok: [s2] ok: [h4] ok: [s1] TASK [Print deployed configuration when running in verbose mode] *************** ok: [h1] => msg: |- initial configuration for h1 ========================================= #!/bin/bash # # This script contains the 'ip' commands needed to set up container # interfaces and route table. It's executed within the container # network namespace on the container host. # # /etc/hosts file is generated as a clab bind. # set -e ### One-Shot configuration (non-Ubuntu VM or container) # # Disable IPv4 and IPv6 forwarding # sysctl -w net.ipv4.ip_forward=0 sysctl -w net.ipv6.conf.all.forwarding=0 # # Interface addressing # ip link set dev eth1 up set +e ip addr del 172.31.1.1/24 dev eth1 2>/dev/null set -e ip addr add 172.31.1.1/24 dev eth1 ip link set eth1 mtu 1500 # # Add routes to IPv4 address pools pointing to the first neighbor on the first link # # If you need anything better, use FRR instead of Linux and start routing (or use IPv6) # # # Print the final routing table ip route ok: [h2] => msg: |- initial configuration for h2 ========================================= #!/bin/bash # # This script contains the 'ip' commands needed to set up container # interfaces and route table. It's executed within the container # network namespace on the container host. # # /etc/hosts file is generated as a clab bind. # set -e ### One-Shot configuration (non-Ubuntu VM or container) # # Disable IPv4 and IPv6 forwarding # sysctl -w net.ipv4.ip_forward=0 sysctl -w net.ipv6.conf.all.forwarding=0 # # Interface addressing # ip link set dev eth1 up set +e ip addr del 172.31.1.2/24 dev eth1 2>/dev/null set -e ip addr add 172.31.1.2/24 dev eth1 ip link set eth1 mtu 1500 # # Add routes to IPv4 address pools pointing to the first neighbor on the first link # # If you need anything better, use FRR instead of Linux and start routing (or use IPv6) # # # Print the final routing table ip route ok: [h3] => msg: |- initial configuration for h3 ========================================= #!/bin/bash # # This script contains the 'ip' commands needed to set up container # interfaces and route table. It's executed within the container # network namespace on the container host. # # /etc/hosts file is generated as a clab bind. # set -e ### One-Shot configuration (non-Ubuntu VM or container) # # Disable IPv4 and IPv6 forwarding # sysctl -w net.ipv4.ip_forward=0 sysctl -w net.ipv6.conf.all.forwarding=0 # # Interface addressing # ip link set dev eth1 up set +e ip addr del 172.31.1.3/24 dev eth1 2>/dev/null set -e ip addr add 172.31.1.3/24 dev eth1 ip link set eth1 mtu 1500 # # Add routes to IPv4 address pools pointing to the first neighbor on the first link # # If you need anything better, use FRR instead of Linux and start routing (or use IPv6) # # # Print the final routing table ip route ok: [h4] => msg: |- initial configuration for h4 ========================================= #!/bin/bash # # This script contains the 'ip' commands needed to set up container # interfaces and route table. It's executed within the container # network namespace on the container host. # # /etc/hosts file is generated as a clab bind. # set -e ### One-Shot configuration (non-Ubuntu VM or container) # # Disable IPv4 and IPv6 forwarding # sysctl -w net.ipv4.ip_forward=0 sysctl -w net.ipv6.conf.all.forwarding=0 # # Interface addressing # ip link set dev eth1 up set +e ip addr del 172.31.1.4/24 dev eth1 2>/dev/null set -e ip addr add 172.31.1.4/24 dev eth1 ip link set eth1 mtu 1500 # # Add routes to IPv4 address pools pointing to the first neighbor on the first link # # If you need anything better, use FRR instead of Linux and start routing (or use IPv6) # # # Print the final routing table ip route ok: [s2] => msg: |- initial configuration for s2 ========================================= updates: - path: /interface[name=system0]/subinterface[index=0] value: description: "No description" ipv4: admin-state: enable address: - ip-prefix: "10.0.0.6/32" - path: /network-instance[name=default] value: type: default interface: - name: system0.0 ok: [s1] => msg: |- initial configuration for s1 ========================================= updates: - path: /interface[name=system0]/subinterface[index=0] value: description: "No description" ipv4: admin-state: enable address: - ip-prefix: "10.0.0.5/32" - path: /network-instance[name=default] value: type: default interface: - name: system0.0 TASK [Find configuration deployment deploy_script for initial] ***************** ok: [h1] ok: [h2] ok: [h3] ok: [s2] ok: [h4] ok: [s1] TASK [Deploy initial configuration] ******************************************** included: /home/pipi/net101/tools/netsim/ansible/tasks/linux/initial-clab.yml for h1, h2, h3, h4 included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/srlinux.yml for s1, s2 TASK [set_fact] **************************************************************** ok: [h1] ok: [h2] ok: [h3] ok: [h4] TASK [Create initial container setup from /home/pipi/net101/tools/netsim/ansible/templates/initial/linux-clab.j2] *** changed: [h3 -> localhost] changed: [h1 -> localhost] changed: [h2 -> localhost] changed: [h4 -> localhost] TASK [Initial container configuration via /tmp/config-UAAaMOub-h1.sh] ********** changed: [h4 -> localhost] changed: [h2 -> localhost] changed: [h1 -> localhost] changed: [h3 -> localhost] TASK [file] ******************************************************************** changed: [h4 -> localhost] changed: [h1 -> localhost] changed: [h3 -> localhost] changed: [h2 -> localhost] TASK [Generate JSON-RPC YAML configuration] ************************************ ok: [s1] ok: [s2] TASK [Update SRL initial node configuration (template=/home/pipi/net101/tools/netsim/ansible/templates/initial/srlinux.j2)] *** changed: [s2] changed: [s1] TASK [debug] ******************************************************************* skipping: [s1] skipping: [s2] PLAY [Deploy module-specific configurations] *********************************** TASK [Set variables that cannot be set with VARS] ****************************** ok: [s1] ok: [s2] TASK [Deploy individual configuration modules] ********************************* included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for s1, s2 => (item=vlan) TASK [Figure out whether to deploy the module vlan on current device] ********** ok: [s1] ok: [s2] TASK [Find configuration template for vlan] ************************************ ok: [s1] ok: [s2] TASK [Print deployed configuration when running in verbose mode] *************** ok: [s1] => msg: |- vlan configuration for s1 ========================================= updates: - path: /interface[name=ethernet-1/1] value: description: "Trunk port s1 ~ s2 native=red" vlan-tagging: True subinterface: - index: 700 type: bridged description: "s1 ~ s2" vlan: encap: untagged: _annotate: "Native VLAN 700" - path: /network-instance[name=vlan700] value: type: mac-vrf description: "s1 ~ s2" interface: - name: ethernet-1/1.700 - path: /interface[name=ethernet-1/2] value: subinterface: - index: 700 type: bridged description: "Access VLAN red s1 ~ h1" - path: /network-instance[name=vlan700] value: type: mac-vrf description: "Access VLAN red s1 ~ h1" interface: - name: ethernet-1/2.700 - path: /interface[name=ethernet-1/3] value: subinterface: - index: 701 type: bridged description: "Access VLAN blue s1 ~ h3" - path: /network-instance[name=vlan701] value: type: mac-vrf description: "Access VLAN blue s1 ~ h3" interface: - name: ethernet-1/3.701 - path: /interface[name=ethernet-1/1] value: vlan-tagging: True subinterface: - index: 701 type: bridged description: "SubIf VLAN blue s1 ~ s2" vlan: encap: single-tagged: vlan-id: "701" - path: /network-instance[name=vlan701] value: type: mac-vrf description: "SubIf VLAN blue s1 ~ s2" interface: - name: ethernet-1/1.701 - path: /interface[name=irb0] value: subinterface: - index: 700 - path: /interface[name=irb0] value: subinterface: - index: 701 ok: [s2] => msg: |- vlan configuration for s2 ========================================= updates: - path: /interface[name=ethernet-1/1] value: description: "Trunk port s2 ~ s1 native=red" vlan-tagging: True subinterface: - index: 700 type: bridged description: "s2 ~ s1" vlan: encap: untagged: _annotate: "Native VLAN 700" - path: /network-instance[name=vlan700] value: type: mac-vrf description: "s2 ~ s1" interface: - name: ethernet-1/1.700 - path: /interface[name=ethernet-1/2] value: subinterface: - index: 700 type: bridged description: "Access VLAN red s2 ~ h2" - path: /network-instance[name=vlan700] value: type: mac-vrf description: "Access VLAN red s2 ~ h2" interface: - name: ethernet-1/2.700 - path: /interface[name=ethernet-1/3] value: subinterface: - index: 701 type: bridged description: "Access VLAN blue s2 ~ h4" - path: /network-instance[name=vlan701] value: type: mac-vrf description: "Access VLAN blue s2 ~ h4" interface: - name: ethernet-1/3.701 - path: /interface[name=ethernet-1/1] value: vlan-tagging: True subinterface: - index: 701 type: bridged description: "SubIf VLAN blue s2 ~ s1" vlan: encap: single-tagged: vlan-id: "701" - path: /network-instance[name=vlan701] value: type: mac-vrf description: "SubIf VLAN blue s2 ~ s1" interface: - name: ethernet-1/1.701 - path: /interface[name=irb0] value: subinterface: - index: 700 - path: /interface[name=irb0] value: subinterface: - index: 701 TASK [Find configuration deployment deploy_script for vlan] ******************** ok: [s1] ok: [s2] TASK [Deploy vlan configuration] *********************************************** included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/srlinux.yml for s1, s2 TASK [Generate JSON-RPC YAML configuration] ************************************ ok: [s1] ok: [s2] TASK [Update SRL vlan node configuration (template=/home/pipi/net101/tools/netsim/ansible/templates/vlan/srlinux.j2)] *** changed: [s2] changed: [s1] TASK [debug] ******************************************************************* skipping: [s1] skipping: [s2] PLAY [Deploy custom deployment templates] ************************************** skipping: no hosts matched PLAY RECAP ********************************************************************* h1 : ok=12 changed=3 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 h2 : ok=12 changed=3 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 h3 : ok=12 changed=3 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 h4 : ok=12 changed=3 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 s1 : ok=19 changed=2 unreachable=0 failed=0 skipped=3 rescued=0 ignored=0 s2 : ok=19 changed=2 unreachable=0 failed=0 skipped=3 rescued=0 ignored=0 The devices under test are simple bridges with a VLAN trunk between them. One of the trunk members is a native VLAN. Both VLANs are using the same IP prefix to identify potential inter-VLAN leaking. * h1 and h2 should be able to ping each other * h3 and h4 should be able to ping each other * h1 should not be able to reach h3 Please note it might take a while for the lab to work due to STP learning phase