其实主要目的是验证Juniper的虚拟交换机netconf是否ready
Testbed搭建
- 基于EVE-NG平台
- Juniper的虚拟交换机vmx使用vmx-14.1.R1来启动
- 一台CentOS主机通过EVE上的net与vmx的em0连通
交换机配置
- 启动交换机后，通过点击Web图标串口登录
- 初始密码是root/root123
- 进入配置模式
root@vMX-1% cli
root@vMX-1> configure
Entering configuration mode
[edit]
root@vMX-1#
- 下发配置
set interfaces em0 unit 0 family inet address 192.168.122.102/24
set system login user netops uid 203
set system login user netops class super-user
set system login user netops authentication plain-text-password
> 要求输入密码:Test123
> 要求再次输入同样的密码:Test123
set system services ftp
set system services ssh root-login allow
set system services ssh protocol-version v2
set system services netconf ssh port 830
- 关于Juniper JUNOS plain-text-password vs. encrypted-password的区别，可以看这里
CentOS主机
- 接口IP为:192.168.122.211/24，与vmx的带外管理口在同一个网段
- 尝试使用netops/Testing来登录
[root@deployer juniper]# ssh [email protected]
Password:
--- JUNOS 14.1R1.10 built 2014-06-07 09:37:07 UTC
netops@vMX-1> exit
Connection to 192.168.122.102 closed.
[root@deployer juniper]#
- 安装ncclient这个python包
pip install ncclient
- 获取GitHub上的相关代码
[root@deployer ~]# git clone https://github.com/ncclient/ncclient
...
[root@deployer ~]# cd /root/ncclient/examples/juniper
[root@deployer juniper]#
对接
- 该文件夹下已经有很多适配Juniper交换机的脚本
通过netconf获取信息
- 选取一个获取端口状态的脚本get-interface-status.py，修改最后一行
connect('192.168.122.102', 830, 'netops', 'Test123')
- 运行脚本,可以获取到vmx的所有接口状态
[root@deployer juniper]# python get-interface-status.py
2020-03-30 17:38:17,083 INFO transport.py:1819 Connected (version 2.0, client OpenSSH_6.4)
2020-03-30 17:38:17,255 INFO transport.py:1819 Authentication (publickey) failed.
2020-03-30 17:38:17,281 INFO transport.py:1819 Authentication (password) successful!
2020-03-30 17:38:17,422 INFO ssh.py:506 [host 192.168.122.102 session 0x7f0e4c5bce90] Sending:
urn:ietf:params:netconf:capability:writable-running:1.0 urn:ietf:params:netconf:capability:with-defaults:1.0 urn:ietf:params:netconf:capability:rollback-on-error:1.0 urn:liberouter:params:netconf:capability:power-control:1.0 urn:ietf:params:netconf:capability:validate:1.0 urn:ietf:params:netconf:capability:confirmed-commit:1.0 urn:ietf:params:netconf:capability:url:1.0?scheme=http,ftp,file,https,sftp urn:ietf:params:netconf:base:1.0 urn:ietf:params:netconf:base:1.1 urn:ietf:params:netconf:capability:candidate:1.0 urn:ietf:params:netconf:capability:notification:1.0 urn:ietf:params:netconf:capability:xpath:1.0 urn:ietf:params:netconf:capability:startup:1.0 urn:ietf:params:netconf:capability:interleave:1.0
2020-03-30 17:38:18,097 INFO rpc.py:325 [host 192.168.122.102 session-id 7303] Requesting 'ExecuteRpc'
2020-03-30 17:38:18,165 INFO ssh.py:506 [host 192.168.122.102 session-id 7303] Sending:
通过netconf设置
- 选取一个获取端口状态的脚本set-description.py，修改最后一行
connect('192.168.122.102', 830, 'netops', 'Test123', 'set interfaces %s description example' % interface)
- 运行
[root@deployer juniper]# python set-description.py
2020-03-30 17:52:34,827 INFO transport.py:1819 Connected (version 2.0, client OpenSSH_6.4)
2020-03-30 17:52:35,054 INFO transport.py:1819 Authentication (publickey) failed.
2020-03-30 17:52:35,095 INFO transport.py:1819 Authentication (password) successful!
2020-03-30 17:52:35,276 INFO ssh.py:506 [host 192.168.122.102 session 0x7f6b8e54cd10] Sending:
urn:ietf:params:netconf:capability:writable-running:1.0 urn:ietf:params:netconf:capability:with-defaults:1.0 urn:ietf:params:netconf:capability:rollback-on-error:1.0 urn:liberouter:params:netconf:capability:power-control:1.0 urn:ietf:params:netconf:capability:validate:1.0 urn:ietf:params:netconf:capability:confirmed-commit:1.0 urn:ietf:params:netconf:capability:url:1.0?scheme=http,ftp,file,https,sftp urn:ietf:params:netconf:base:1.0 urn:ietf:params:netconf:base:1.1 urn:ietf:params:netconf:capability:candidate:1.0 urn:ietf:params:netconf:capability:notification:1.0 urn:ietf:params:netconf:capability:xpath:1.0 urn:ietf:params:netconf:capability:startup:1.0 urn:ietf:params:netconf:capability:interleave:1.0
2020-03-30 17:52:36,350 INFO rpc.py:325 [host 192.168.122.102 session-id 7522] Requesting 'Lock'
2020-03-30 17:52:36,426 INFO ssh.py:506 [host 192.168.122.102 session-id 7522] Sending:
set interfaces em0 description example
2020-03-30 17:52:36,586 INFO rpc.py:325 [host 192.168.122.102 session-id 7522] Requesting 'Commit'
2020-03-30 17:52:36,652 INFO ssh.py:506 [host 192.168.122.102 session-id 7522] Sending:
2020-03-30 17:52:37,912 INFO rpc.py:325 [host 192.168.122.102 session-id 7522] Requesting 'Unlock'
2020-03-30 17:52:37,975 INFO ssh.py:506 [host 192.168.122.102 session-id 7522] Sending:
-
对比前后em0接口的配置，发现多了接口描述，和预期相同
set_port_desc.png