Creating Device configuration snippets [CREATED] h1: initial,routing [CREATED] h2: initial,routing [CREATED] srv: initial,routing [CREATED] dut: initial,vrf Config Deploying device configurations [INFO] Executing initial configuration for node h1 (namespace clab- ml-17-h1) [INFO] Executing initial configuration for node h2 (namespace clab- ml-17-h2) [INFO] Executing initial configuration for node srv (namespace clab- ml-17-srv) [INFO] Executing routing configuration for node h1 (namespace clab- ml-17-h1) [INFO] Executing routing configuration for node h2 (namespace clab- ml-17-h2) [INFO] Executing routing configuration for node srv (namespace clab- ml-17-srv) [INFO] Starting Ansible playbook to deploy the rest of the configurations [WARNING]: Found variable using reserved name: hosts PLAY [Deploy initial device configuration] ************************************* TASK [Set variables that cannot be set with VARS] ****************************** ok: [dut] TASK [Deploy initial configuration] ******************************************** included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-module.yml for dut TASK [Figure out whether to deploy the module initial on current device] ******* ok: [dut] TASK [Find configuration template for initial] ********************************* ok: [dut] TASK [fail] ******************************************************************** skipping: [dut] TASK [Find configuration deployment deploy_script for initial] ***************** ok: [dut] TASK [Print deployed configuration when running in verbose mode] *************** ok: [dut] => { "msg": "initial configuration for dut\n=========================================\n\nupdates:\n\n- path: /interface[name=system0]/subinterface[index=0]\n value:\n description: \"No description\"\n admin-state: enable\n ipv4:\n admin-state: enable\n address:\n - ip-prefix: \"10.0.0.4/32\"\n ipv6:\n admin-state: enable\n address:\n - ip-prefix: \"2001:db8:1:4::1/64\"\n type: \"global-unicast\"\n\n- path: /interface[name=ethernet-1/1]\n value:\n description: \"dut ~ h1\"\n subinterface:\n index: 0\n description: \"dut ~ h1\"\n\n- path: /interface[name=ethernet-1/1]/subinterface[index=0]\n value:\n description: \"dut ~ h1\"\n admin-state: enable\n ipv4:\n admin-state: enable\n address:\n - ip-prefix: \"172.16.0.4/24\"\n primary: [null]\n ipv6:\n admin-state: enable\n address:\n - ip-prefix: \"2001:db8:2::4/64\"\n type: \"global-unicast\"\n neighbor-discovery:\n learn-unsolicited: link-local\n router-advertisement:\n router-role:\n admin-state: enable # no ipv6 nd suppress-ra\n min-advertisement-interval: 4 # Leaving this at platform default 200..600 takes too long at startup\n _annotate_min-advertisement-interval: \"Reduced from platform default 200s\"\n max-advertisement-interval: 5\n\n- path: /interface[name=ethernet-1/2]\n value:\n description: \"dut ~ h2\"\n subinterface:\n index: 0\n description: \"dut ~ h2\"\n\n- path: /interface[name=ethernet-1/2]/subinterface[index=0]\n value:\n description: \"dut ~ h2\"\n admin-state: enable\n ipv4:\n admin-state: enable\n address:\n - ip-prefix: \"172.16.1.4/24\"\n primary: [null]\n ipv6:\n admin-state: enable\n address:\n - ip-prefix: \"2001:db8:2:1::4/64\"\n type: \"global-unicast\"\n neighbor-discovery:\n learn-unsolicited: link-local\n router-advertisement:\n router-role:\n admin-state: enable # no ipv6 nd suppress-ra\n min-advertisement-interval: 4 # Leaving this at platform default 200..600 takes too long at startup\n _annotate_min-advertisement-interval: \"Reduced from platform default 200s\"\n max-advertisement-interval: 5\n\n- path: /interface[name=ethernet-1/3]\n value:\n description: \"dut ~ srv\"\n subinterface:\n index: 0\n description: \"dut ~ srv\"\n\n- path: /interface[name=ethernet-1/3]/subinterface[index=0]\n value:\n description: \"dut ~ srv\"\n admin-state: enable\n ipv4:\n admin-state: enable\n address:\n - ip-prefix: \"172.16.2.4/24\"\n primary: [null]\n ipv6:\n admin-state: enable\n address:\n - ip-prefix: \"2001:db8:2:2::4/64\"\n type: \"global-unicast\"\n neighbor-discovery:\n learn-unsolicited: link-local\n router-advertisement:\n router-role:\n admin-state: enable # no ipv6 nd suppress-ra\n min-advertisement-interval: 4 # Leaving this at platform default 200..600 takes too long at startup\n _annotate_min-advertisement-interval: \"Reduced from platform default 200s\"\n max-advertisement-interval: 5\n\n\n\n- path: /network-instance[name=default]\n value:\n type: default\n interface:\n - name: system0.0\n\n\n\n\n# TODO: vdata.rd, vdata.import/export, vdata.af\n- path: /network-instance[name=red]\n value:\n type: ip-vrf\n interface:\n - name: ethernet-1/1.0\n\n\n\n# TODO: vdata.rd, vdata.import/export, vdata.af\n- path: /network-instance[name=blue]\n value:\n type: ip-vrf\n interface:\n - name: ethernet-1/2.0\n\n\n\n# TODO: vdata.rd, vdata.import/export, vdata.af\n- path: /network-instance[name=common]\n value:\n type: ip-vrf\n interface:\n - name: ethernet-1/3.0\n\n\n" } TASK [Deploy initial configuration] ******************************************** included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-config/srlinux.yml for dut TASK [Generate JSON-RPC YAML configuration] ************************************ ok: [dut] TASK [Update SRL initial node configuration (template=/work/netlab_cicd/node_files/dut/initial)] *** changed: [dut] TASK [debug] ******************************************************************* skipping: [dut] PLAY [Deploy module-specific configurations] *********************************** TASK [Set variables that cannot be set with VARS] ****************************** ok: [dut] TASK [Deploy individual configuration modules] ********************************* included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-module.yml for dut => (item=vrf) included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-module.yml for dut => (item=routing) TASK [Figure out whether to deploy the module vrf on current device] *********** ok: [dut] TASK [Find configuration template for vrf] ************************************* ok: [dut] TASK [fail] ******************************************************************** skipping: [dut] TASK [Find configuration deployment deploy_script for vrf] ********************* ok: [dut] TASK [Print deployed configuration when running in verbose mode] *************** ok: [dut] => { "msg": "vrf configuration for dut\n=========================================\n\nupdates:\n\n- path: /network-instance[name=red]\n value:\n type: ip-vrf\n\n\n- path: /routing-policy/policy[name=accept_all]\n value:\n default-action:\n policy-result: accept\n\n- path: /routing-policy/community-set[name=ibgp-mark]\n value:\n member: [ \"65536:0:65536\" ]\n\n- path: /routing-policy/policy[name=ibgp-mark]\n value:\n default-action:\n policy-result: reject\n statement:\n - name: mark-ibgp-routes\n action:\n bgp:\n communities:\n add: ibgp-mark\n policy-result: accept\n\n\n- path: /routing-policy/policy[name=red_bgp_export]\n value:\n default-action:\n policy-result: reject\n statement:\n - name: bgp\n match:\n protocol: bgp\n action:\n policy-result: next-policy\n bgp:\n communities:\n remove:\n ibgp-mark\n - name: export_local\n match:\n protocol: local\n action:\n policy-result: next-policy\n\n\n- path: /network-instance[name=red]/protocols/bgp\n value:\n admin-state: enable\n autonomous-system: 65000\n router-id: 10.0.0.4\n ebgp-default-policy:\n export-reject-all: False\n import-reject-all: False\n\n afi-safi:\n - afi-safi-name: ipv4-unicast\n admin-state: enable\n afi-safi:\n - afi-safi-name: ipv6-unicast\n admin-state: enable\n\n\n\n\n- path: /interface[name=ethernet-1/1]/subinterface[index=0]\n value:\n ipv4:\n arp:\n host-route:\n populate:\n - route-type: dynamic\n datapath-programming: true\n ipv6:\n neighbor-discovery:\n host-route:\n populate:\n - route-type: dynamic\n datapath-programming: true\n\n- path: /network-instance[name=red]/protocols/bgp-vpn\n value:\n bgp-instance:\n - id: 1\n route-distinguisher:\n rd: \"65000:1\"\n route-target:\n import-rt: \"target:65000:1\"\n export-rt: \"target:65000:1\"\n\n- path: /network-instance[name=red]/inter-instance-policies\n value:\n apply-policy:\n export-policy:\n - \"red_vpn_export\"\n import-policy:\n - \"red_vpn_import\"\n\n- path: /routing-policy/policy[name=red_vpn_export]\n value:\n default-action:\n policy-result: \"accept\"\n\n- path: /routing-policy/policy[name=red_vpn_import]\n value:\n default-action:\n policy-result: \"reject\"\n statement:\n - name: 110\n match:\n origin-network-instance: \"red\"\n action:\n policy-result: \"accept\"\n - name: 112\n match:\n origin-network-instance: \"common\"\n action:\n policy-result: \"accept\"\n\n\n- path: /network-instance[name=blue]\n value:\n type: ip-vrf\n\n\n- path: /routing-policy/policy[name=accept_all]\n value:\n default-action:\n policy-result: accept\n\n- path: /routing-policy/community-set[name=ibgp-mark]\n value:\n member: [ \"65536:0:65536\" ]\n\n- path: /routing-policy/policy[name=ibgp-mark]\n value:\n default-action:\n policy-result: reject\n statement:\n - name: mark-ibgp-routes\n action:\n bgp:\n communities:\n add: ibgp-mark\n policy-result: accept\n\n\n- path: /routing-policy/policy[name=blue_bgp_export]\n value:\n default-action:\n policy-result: reject\n statement:\n - name: bgp\n match:\n protocol: bgp\n action:\n policy-result: next-policy\n bgp:\n communities:\n remove:\n ibgp-mark\n - name: export_local\n match:\n protocol: local\n action:\n policy-result: next-policy\n\n\n- path: /network-instance[name=blue]/protocols/bgp\n value:\n admin-state: enable\n autonomous-system: 65000\n router-id: 10.0.0.4\n ebgp-default-policy:\n export-reject-all: False\n import-reject-all: False\n\n afi-safi:\n - afi-safi-name: ipv4-unicast\n admin-state: enable\n afi-safi:\n - afi-safi-name: ipv6-unicast\n admin-state: enable\n\n\n\n\n- path: /interface[name=ethernet-1/2]/subinterface[index=0]\n value:\n ipv4:\n arp:\n host-route:\n populate:\n - route-type: dynamic\n datapath-programming: true\n ipv6:\n neighbor-discovery:\n host-route:\n populate:\n - route-type: dynamic\n datapath-programming: true\n\n- path: /network-instance[name=blue]/protocols/bgp-vpn\n value:\n bgp-instance:\n - id: 1\n route-distinguisher:\n rd: \"65000:2\"\n route-target:\n import-rt: \"target:65000:2\"\n export-rt: \"target:65000:2\"\n\n- path: /network-instance[name=blue]/inter-instance-policies\n value:\n apply-policy:\n export-policy:\n - \"blue_vpn_export\"\n import-policy:\n - \"blue_vpn_import\"\n\n- path: /routing-policy/policy[name=blue_vpn_export]\n value:\n default-action:\n policy-result: \"accept\"\n\n- path: /routing-policy/policy[name=blue_vpn_import]\n value:\n default-action:\n policy-result: \"reject\"\n statement:\n - name: 111\n match:\n origin-network-instance: \"blue\"\n action:\n policy-result: \"accept\"\n - name: 112\n match:\n origin-network-instance: \"common\"\n action:\n policy-result: \"accept\"\n\n\n- path: /network-instance[name=common]\n value:\n type: ip-vrf\n\n\n- path: /routing-policy/policy[name=accept_all]\n value:\n default-action:\n policy-result: accept\n\n- path: /routing-policy/community-set[name=ibgp-mark]\n value:\n member: [ \"65536:0:65536\" ]\n\n- path: /routing-policy/policy[name=ibgp-mark]\n value:\n default-action:\n policy-result: reject\n statement:\n - name: mark-ibgp-routes\n action:\n bgp:\n communities:\n add: ibgp-mark\n policy-result: accept\n\n\n- path: /routing-policy/policy[name=common_bgp_export]\n value:\n default-action:\n policy-result: reject\n statement:\n - name: bgp\n match:\n protocol: bgp\n action:\n policy-result: next-policy\n bgp:\n communities:\n remove:\n ibgp-mark\n - name: export_local\n match:\n protocol: local\n action:\n policy-result: next-policy\n\n\n- path: /network-instance[name=common]/protocols/bgp\n value:\n admin-state: enable\n autonomous-system: 65000\n router-id: 10.0.0.4\n ebgp-default-policy:\n export-reject-all: False\n import-reject-all: False\n\n afi-safi:\n - afi-safi-name: ipv4-unicast\n admin-state: enable\n afi-safi:\n - afi-safi-name: ipv6-unicast\n admin-state: enable\n\n\n\n\n- path: /interface[name=ethernet-1/3]/subinterface[index=0]\n value:\n ipv4:\n arp:\n host-route:\n populate:\n - route-type: dynamic\n datapath-programming: true\n ipv6:\n neighbor-discovery:\n host-route:\n populate:\n - route-type: dynamic\n datapath-programming: true\n\n- path: /network-instance[name=common]/protocols/bgp-vpn\n value:\n bgp-instance:\n - id: 1\n route-distinguisher:\n rd: \"65000:3\"\n route-target:\n import-rt: \"target:65000:1\"\n export-rt: \"target:65000:3\"\n\n- path: /network-instance[name=common]/inter-instance-policies\n value:\n apply-policy:\n export-policy:\n - \"common_vpn_export\"\n import-policy:\n - \"common_vpn_import\"\n\n- path: /routing-policy/policy[name=common_vpn_export]\n value:\n default-action:\n policy-result: \"accept\"\n\n- path: /routing-policy/policy[name=common_vpn_import]\n value:\n default-action:\n policy-result: \"reject\"\n statement:\n - name: 110\n match:\n origin-network-instance: \"red\"\n action:\n policy-result: \"accept\"\n - name: 111\n match:\n origin-network-instance: \"blue\"\n action:\n policy-result: \"accept\"\n - name: 112\n match:\n origin-network-instance: \"common\"\n action:\n policy-result: \"accept\"\n\n" } TASK [Deploy vrf configuration] ************************************************ included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-config/srlinux.yml for dut TASK [Generate JSON-RPC YAML configuration] ************************************ ok: [dut] TASK [Update SRL vrf node configuration (template=/work/netlab_cicd/node_files/dut/vrf)] *** changed: [dut] TASK [debug] ******************************************************************* skipping: [dut] TASK [Figure out whether to deploy the module routing on current device] ******* ok: [dut] TASK [Find configuration template for routing] ********************************* skipping: [dut] TASK [fail] ******************************************************************** skipping: [dut] TASK [Find configuration deployment deploy_script for routing] ***************** skipping: [dut] TASK [Print deployed configuration when running in verbose mode] *************** skipping: [dut] TASK [Deploy routing configuration] ******************************************** skipping: [dut] PLAY [Deploy custom deployment templates] ************************************** skipping: no hosts matched PLAY RECAP ********************************************************************* dut : ok=20 changed=2 unreachable=0 failed=0 skipped=9 rescued=0 ignored=0 Results of configuration script deployments ================================================================================ h1 Script: initial,routing h2 Script: initial,routing srv Script: initial,routing The device under test has two user VRFs and a common services VRF. The lab tests inter-VRF route leaking between common VRF and other VRFs * h1 and h2 should be able to ping srv but not each other